ScottyLabs/infrastructure

Watch

Fork 3

feat: add keycloak admin access through the scottylabs realm #183

Merged

anish merged 1 commit from keycloak-admin-access into main

2026-10-26 08:00:02 +00:00

anish commented

2026-10-26 07:56:42 +00:00

Owner

No description provided.

anish added 1 commit

2026-10-26 07:56:42 +00:00

feat: add keycloak admin access through the scottylabs realm

atlantis/plan: search-console No changes. Your infrastructure matches the configuration.

Details

atlantis/plan 22/22 projects planned successfully.

atlantis/pre_workflow_hook: Fetch flake inputs before parallel plans succeeded.

Details

atlantis/pre_workflow_hook: Generate atlantis.yaml from the flake succeeded.

Details

atlantis/apply: keycloak Apply failed.

Details

atlantis/apply: occ Apply succeeded.

Details

atlantis/apply: litellm Apply succeeded.

Details

atlantis/apply: atlantis Apply succeeded.

Details

atlantis/apply: matrix Apply succeeded.

Details

atlantis/apply: forgejo Apply succeeded.

Details

atlantis/apply: nixbot Apply succeeded.

Details

atlantis/apply: kennel Apply succeeded.

Details

atlantis/apply: hosts Apply succeeded.

Details

atlantis/apply: cloudflare-tokens Apply succeeded.

Details

atlantis/apply: mail Apply succeeded.

Details

atlantis/apply: headscale Apply succeeded.

Details

atlantis/apply: garage-webadmin Apply succeeded.

Details

atlantis/apply: governance Apply succeeded.

Details

atlantis/apply: observability Apply succeeded.

Details

atlantis/apply: openbao Apply succeeded.

Details

atlantis/apply: webhook Apply succeeded.

Details

atlantis/apply: posthog Apply succeeded.

Details

atlantis/apply: snot Apply succeeded.

Details

atlantis/apply: vaultwarden Apply succeeded.

Details

atlantis/apply: ricochet Apply succeeded.

Details

atlantis/apply: search-console Apply succeeded.

Details

atlantis/apply 1/22 projects failed to apply.

CI / check-1 (pull_request) Failing after 1m0s

Details

CI / build (pull_request) Failing after 1m6s

Details

CI / check (pull_request) Failing after 0s

Details

6e091699ae

Signed-off-by: Anish Pallati <i@anish.land>

scottylabs-bot commented

2026-10-26 07:57:13 +00:00

Owner

Kennel Deployments

Torn down at 2026-10-26 08:00:04 UTC.

### Kennel Deployments Torn down at 2026-10-26 08:00:04 UTC.

scottylabs-bot commented

2026-10-26 07:57:15 +00:00

Owner

Ran Plan for 22 projects:

project: occ dir: . workspace: occ
project: governance dir: . workspace: governance
project: mail dir: . workspace: mail
project: garage-webadmin dir: . workspace: garage-webadmin
project: kennel dir: . workspace: kennel
project: headscale dir: . workspace: headscale
project: matrix dir: . workspace: matrix
project: forgejo dir: . workspace: forgejo
project: litellm dir: . workspace: litellm
project: hosts dir: . workspace: hosts
project: nixbot dir: . workspace: nixbot
project: observability dir: . workspace: observability
project: cloudflare-tokens dir: . workspace: cloudflare-tokens
project: keycloak dir: . workspace: keycloak
project: atlantis dir: . workspace: atlantis
project: snot dir: . workspace: snot
project: openbao dir: . workspace: openbao
project: posthog dir: . workspace: posthog
project: vaultwarden dir: . workspace: vaultwarden
project: ricochet dir: . workspace: ricochet
project: webhook dir: . workspace: webhook
project: search-console dir: . workspace: search-console

1. project: `occ` dir: `.` workspace: `occ`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
cloudflare_dns_record.this["incus"]: Refreshing state... [id=68d4d1524c79e8faf2eb4b01f8eeda5c]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p occ
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p occ
```

No changes. Your infrastructure matches the configuration.

2. project: `governance` dir: `.` workspace: `governance`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_policy.governance: Refreshing state... [id=governance]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe]
data.keycloak_openid_client.realm_management: Reading...
data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484]
keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a]
keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966]
vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET]
vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID]

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p governance
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p governance
```

No changes. Your infrastructure matches the configuration.

3. project: `mail` dir: `.` workspace: `mail`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
cloudflare_dns_record.this["scottylabs-org-mx"]: Refreshing state... [id=01791245a3e69e14b1a4b8f3801b0677]
cloudflare_dns_record.this["scottylabs-dev-dkim"]: Refreshing state... [id=8f81d427fc9a20433b2b768a2820753a]
cloudflare_email_sending_subdomain.cmu-dev: Refreshing state... [id=fcca671bdc8e46e4ad9efb669e3a190c]
cloudflare_dns_record.this["scottylabs-org-dkim"]: Refreshing state... [id=0c3e8525e281a85dcd4f127e7babb35d]
cloudflare_email_sending_subdomain.scottylabs-org: Refreshing state... [id=d861e202e90146f49239f7f638bdb871]
cloudflare_dns_record.this["scottylabs-dev-spf"]: Refreshing state... [id=e78ffa0bc6095aafd2067c900f929b50]
cloudflare_dns_record.this["scottylabs-dev-mx"]: Refreshing state... [id=b4e4301c200d52f66335bb93c7f3b9dd]
cloudflare_dns_record.this["scottylabs-org-spf"]: Refreshing state... [id=6075ba34182127d6149528376bda1a6a]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p mail
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p mail
```

No changes. Your infrastructure matches the configuration.

4. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
random_password.garage_webadmin_jwt: Refreshing state... [id=none]
vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185]
cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1]
keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf]
vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p garage-webadmin
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p garage-webadmin
```

No changes. Your infrastructure matches the configuration.

5. project: `kennel` dir: `.` workspace: `kennel`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_policy.kennel: Refreshing state... [id=kennel]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f]
cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69]
cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p kennel
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p kennel
```

No changes. Your infrastructure matches the configuration.

6. project: `headscale` dir: `.` workspace: `headscale`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
random_password.headplane_cookie: Refreshing state... [id=none]
vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8]
keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac]
cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20]
cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00]
keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210]
vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc]
keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7]
vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p headscale
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p headscale
```

No changes. Your infrastructure matches the configuration.

7. project: `matrix` dir: `.` workspace: `matrix`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada]
cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p matrix
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p matrix
```

No changes. Your infrastructure matches the configuration.

8. project: `forgejo` dir: `.` workspace: `forgejo`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960]
garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725]
garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6]
keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198]
vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage]
vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p forgejo
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p forgejo
```

No changes. Your infrastructure matches the configuration.

9. project: `litellm` dir: `.` workspace: `litellm`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
random_password.cli_proxy_api_key: Refreshing state... [id=none]
random_password.litellm_salt_key: Refreshing state... [id=none]
random_password.litellm_master_key: Refreshing state... [id=none]
vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key]
vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key]
vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509]
keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f]
cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44]
vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p litellm
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p litellm
```

No changes. Your infrastructure matches the configuration.

10. project: `hosts` dir: `.` workspace: `hosts`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5bad63854979cad3d5b8b2a9b97aae67"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["388da333f823d55e3d5cfbd686303ed4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https]
cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d]
cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997]
cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c]
cloudflare_dns_record.this["infra-03"]: Refreshing state... [id=9172a8cbcb80ce7c1ed2cae96e820659]
cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee]
cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p hosts
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p hosts
```

No changes. Your infrastructure matches the configuration.

11. project: `nixbot` dir: `.` workspace: `nixbot`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding svalabs/forgejo versions matching "~> 1.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing svalabs/forgejo v1.7.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed svalabs/forgejo v1.7.0 (unauthenticated)
- Using svalabs/forgejo v1.7.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│   - svalabs/forgejo
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.nixbot_forgejo: Refreshing state... [id=none]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
forgejo_user.nixbot: Refreshing state...
forgejo_team.nixbot: Refreshing state... [name=nixbot]
forgejo_team_member.nixbot: Refreshing state...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.nixbot: Refreshing state... [id=a45a253b-c5ce-4a75-91cd-c7876354e731]
vault_kv_secret_v2.nixbot_oidc: Refreshing state... [id=secret/data/infra/nixbot-oidc]
cloudflare_dns_record.this["nixbot"]: Refreshing state... [id=715d7a325208700119db81c024eaf46f]
forgejo_personal_access_token.nixbot: Refreshing state... [name=nixbot]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
vault_kv_secret_v2.nixbot_forgejo: Refreshing state... [id=secret/data/infra/nixbot-forgejo]

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p nixbot
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p nixbot
```

No changes. Your infrastructure matches the configuration.

12. project: `observability` dir: `.` workspace: `observability`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.grafana_secret_key: Refreshing state... [id=none]
vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c]
garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470]
garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c]
garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3]
garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c]
vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3]
garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470]
keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e]
garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c]
vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3]
vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc]
cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0]
cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p observability
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p observability
```

No changes. Your infrastructure matches the configuration.

13. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_api_token_permission_groups_list.all: Reading...
data.cloudflare_api_token_permission_groups_list.all: Read complete after 0s
cloudflare_api_token.terranix-dns: Refreshing state... [id=3096f3be78d1baa0ac9e7447414df53b]
cloudflare_api_token.terranix-mail: Refreshing state... [id=88156a4eb6d0856486ce00aed9b99012]
cloudflare_api_token.terranix-hosts: Refreshing state... [id=df616c9aae907d8b1442ce79d2f000b2]
cloudflare_api_token.smtp: Refreshing state... [id=6b334833d9de2b35b22769ba27265f71]
vault_kv_secret_v2.cloudflare_terranix-mail: Refreshing state... [id=secret/data/infra/cloudflare-terranix-mail]
vault_kv_secret_v2.cloudflare_terranix-dns: Refreshing state... [id=secret/data/infra/cloudflare-terranix-dns]
vault_kv_secret_v2.cloudflare_smtp: Refreshing state... [id=secret/data/infra/cloudflare-smtp]
vault_kv_secret_v2.cloudflare_terranix-hosts: Refreshing state... [id=secret/data/infra/cloudflare-terranix-hosts]

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p cloudflare-tokens
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p cloudflare-tokens
```

No changes. Your infrastructure matches the configuration.

14. project: `keycloak` dir: `.` workspace: `keycloak`

Show Output

copying 1 paths...
copying path '/nix/store/397k0bnzj4zdhk2pcnlhkfxfs5hfl61k-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.vault_kv_secret_v2.keycloak_idp: Reading...
ephemeral.vault_kv_secret_v2.keycloak_ldap: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.forgejo_idp: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.forgejo_idp: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak_ldap: Open complete after 0s
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
data.keycloak_realm.master: Reading...
data.keycloak_realm.scottylabs: Reading...
keycloak_realm.scottylabs: Refreshing state... [id=scottylabs]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.keycloak_realm.master: Read complete after 0s [id=master]
keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev]
keycloak_oidc_identity_provider.apple: Refreshing state... [id=apple]
keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google]
keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA]
data.keycloak_role.master_admin: Reading...
keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu]
keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack]
data.keycloak_role.master_admin: Read complete after 1s [id=b8fc6ad5-7b83-4d86-9227-620c8e50e720]
keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml]
cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc]
keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de]
keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2]
keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556]
keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7]
keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc]
keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0]
keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs]
keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac]
keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae]
keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d]
keycloak_custom_identity_provider_mapper.apple_id: Refreshing state... [id=81993bf9-93bf-40fd-9b59-0909abb570f2]
keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7]
keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113]
keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d]
keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802]
keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9]
keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1]
keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da]
keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784]
keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505]
keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29]
keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f]
keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651]
keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377]
keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f]
keycloak_custom_identity_provider_mapper.apple_email: Refreshing state... [id=68841e9f-a367-4c71-ac26-668ac8e559ad]
keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6]
keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b]
keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290]
keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60]
keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115]
keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded]
keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
ephemeral.vault_kv_secret_v2.keycloak_ldap: Closing...
ephemeral.vault_kv_secret_v2.keycloak_ldap: Close complete after 0s
ephemeral.vault_kv_secret_v2.forgejo_idp: Closing...
ephemeral.vault_kv_secret_v2.forgejo_idp: Close complete after 0s

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create

OpenTofu will perform the following actions:

  # keycloak_custom_identity_provider_mapper.master_devops_admin will be created
+   resource "keycloak_custom_identity_provider_mapper" "master_devops_admin" {
+       extra_config             = {
          + "are.claim.values.regex" = "false"
          + "claims"                 = jsonencode(
                [
                  + {
+                       key   = "groups"
+                       value = "/projects/devops/admins"
                    },
                ]
            )
          + "role"                   = "admin"
          + "syncMode"               = "FORCE"
        }
+       id                       = (known after apply)
+       identity_provider_alias  = "scottylabs"
+       identity_provider_mapper = "oidc-advanced-role-idp-mapper"
+       name                     = "devops-admin"
+       realm                    = "master"
    }

  # keycloak_oidc_identity_provider.master_scottylabs will be created
+   resource "keycloak_oidc_identity_provider" "master_scottylabs" {
+       accepts_prompt_none_forward_from_client = false
+       add_read_token_role_on_create           = false
+       alias                                   = "scottylabs"
+       authenticate_by_default                 = false
+       authorization_url                       = "https://idp.scottylabs.org/realms/scottylabs/protocol/openid-connect/auth"
+       backchannel_supported                   = true
+       client_id                               = "keycloak-master"
+       client_secret                           = (sensitive value)
+       client_secret_wo                        = (write-only attribute)
+       default_scopes                          = "openid profile email"
+       disable_type_claim_check                = false
+       disable_user_info                       = false
+       display_name                            = "ScottyLabs"
+       enabled                                 = true
+       extra_config                            = {
          + "clientAuthMethod" = "client_secret_post"
        }
+       first_broker_login_flow_alias           = "first broker login"
+       hide_on_login_page                      = false
+       id                                      = (known after apply)
+       internal_id                             = (known after apply)
+       issuer                                  = "https://idp.scottylabs.org/realms/scottylabs"
+       jwks_url                                = "https://idp.scottylabs.org/realms/scottylabs/protocol/openid-connect/certs"
+       link_only                               = false
+       org_redirect_mode_email_matches         = false
+       provider_id                             = "oidc"
+       realm                                   = "master"
+       store_token                             = false
+       sync_mode                               = "FORCE"
+       token_url                               = "https://idp.scottylabs.org/realms/scottylabs/protocol/openid-connect/token"
+       trust_email                             = true
+       ui_locales                              = false
+       user_info_url                           = "https://idp.scottylabs.org/realms/scottylabs/protocol/openid-connect/userinfo"
+       validate_signature                      = true
    }

  # keycloak_openid_client.keycloak_master will be created
+   resource "keycloak_openid_client" "keycloak_master" {
+       access_token_lifespan                     = (known after apply)
+       access_type                               = "CONFIDENTIAL"
+       always_display_in_console                 = false
+       backchannel_logout_session_required       = true
+       client_authenticator_type                 = "client-secret"
+       client_id                                 = "keycloak-master"
+       client_offline_session_idle_timeout       = (known after apply)
+       client_offline_session_max_lifespan       = (known after apply)
+       client_secret                             = (sensitive value)
+       client_secret_wo                          = (write-only attribute)
+       client_session_idle_timeout               = (known after apply)
+       client_session_max_lifespan               = (known after apply)
+       consent_required                          = (known after apply)
+       direct_access_grants_enabled              = false
+       display_on_consent_screen                 = (known after apply)
+       enabled                                   = true
+       exclude_issuer_from_auth_response         = (known after apply)
+       exclude_session_state_from_auth_response  = (known after apply)
+       frontchannel_logout_enabled               = (known after apply)
+       full_scope_allowed                        = true
+       id                                        = (known after apply)
+       implicit_flow_enabled                     = (known after apply)
+       import                                    = false
+       name                                      = "Keycloak admin console"
+       oauth2_device_authorization_grant_enabled = false
+       oauth2_jwt_authorization_grant_enabled    = false
+       realm_id                                  = "scottylabs"
+       require_dpop_bound_tokens                 = (known after apply)
+       resource_server_id                        = (known after apply)
+       service_account_user_id                   = (known after apply)
+       service_accounts_enabled                  = (known after apply)
+       standard_flow_enabled                     = true
+       standard_token_exchange_enabled           = false
+       use_refresh_tokens                        = true
+       use_refresh_tokens_client_credentials     = false
+       valid_post_logout_redirect_uris           = (known after apply)
+       valid_redirect_uris                       = [
+           "https://idp.scottylabs.org/realms/master/broker/scottylabs/endpoint",
        ]
+       web_origins                               = (known after apply)
    }

  # keycloak_openid_client.terranix will be created
+   resource "keycloak_openid_client" "terranix" {
+       access_token_lifespan                     = (known after apply)
+       access_type                               = "CONFIDENTIAL"
+       always_display_in_console                 = false
+       backchannel_logout_session_required       = true
+       client_authenticator_type                 = "client-secret"
+       client_id                                 = "terranix"
+       client_offline_session_idle_timeout       = (known after apply)
+       client_offline_session_max_lifespan       = (known after apply)
+       client_secret                             = (sensitive value)
+       client_secret_wo                          = (write-only attribute)
+       client_session_idle_timeout               = (known after apply)
+       client_session_max_lifespan               = (known after apply)
+       consent_required                          = (known after apply)
+       direct_access_grants_enabled              = false
+       display_on_consent_screen                 = (known after apply)
+       enabled                                   = true
+       exclude_issuer_from_auth_response         = (known after apply)
+       exclude_session_state_from_auth_response  = (known after apply)
+       frontchannel_logout_enabled               = (known after apply)
+       full_scope_allowed                        = true
+       id                                        = (known after apply)
+       implicit_flow_enabled                     = (known after apply)
+       import                                    = false
+       name                                      = "terranix"
+       oauth2_device_authorization_grant_enabled = false
+       oauth2_jwt_authorization_grant_enabled    = false
+       realm_id                                  = "master"
+       require_dpop_bound_tokens                 = (known after apply)
+       resource_server_id                        = (known after apply)
+       service_account_user_id                   = (known after apply)
+       service_accounts_enabled                  = true
+       standard_flow_enabled                     = false
+       standard_token_exchange_enabled           = false
+       use_refresh_tokens                        = true
+       use_refresh_tokens_client_credentials     = false
+       valid_post_logout_redirect_uris           = (known after apply)
+       valid_redirect_uris                       = (known after apply)
+       web_origins                               = (known after apply)
    }

  # keycloak_openid_client_service_account_realm_role.terranix_admin will be created
+   resource "keycloak_openid_client_service_account_realm_role" "terranix_admin" {
+       id                      = (known after apply)
+       realm_id                = "master"
+       role                    = "admin"
+       service_account_user_id = (known after apply)
    }

  # keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups will be created
+   resource "keycloak_openid_group_membership_protocol_mapper" "keycloak_master_groups" {
+       add_to_access_token        = true
+       add_to_id_token            = true
+       add_to_token_introspection = false
+       add_to_userinfo            = true
+       claim_name                 = "groups"
+       client_id                  = (known after apply)
+       full_path                  = true
+       id                         = (known after apply)
+       name                       = "groups"
+       realm_id                   = "scottylabs"
    }

  # vault_kv_secret_v2.keycloak_terranix will be created
+   resource "vault_kv_secret_v2" "keycloak_terranix" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "infra/keycloak-terranix"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

Plan: 7 to add, 0 to change, 0 to destroy.
╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.keycloak_idp,
│   on config.tf.json line 21, in data.vault_kv_secret_v2.keycloak_idp:
│   21:       }
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and one more similar warning elsewhere)
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_oidc_google_identity_provider.google,
│   on config.tf.json line 485, in resource.keycloak_oidc_google_identity_provider.google:
│  485:       }
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
╵

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/183/keycloak/keycloak-keycloak.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/183/keycloak/keycloak-keycloak.tfplan"

▶️ To apply this plan, comment:
```
atlantis apply -p keycloak
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p keycloak
```

Plan: 7 to add, 0 to change, 0 to destroy.

15. project: `atlantis` dir: `.` workspace: `atlantis`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding svalabs/forgejo versions matching "~> 1.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing svalabs/forgejo v1.7.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed svalabs/forgejo v1.7.0 (unauthenticated)
- Using svalabs/forgejo v1.7.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│   - svalabs/forgejo
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.atlantis_webhook_secret: Refreshing state... [id=none]
vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.forgejo_repository.governance: Reading...
data.forgejo_repository.infrastructure: Reading...
data.forgejo_repository.governance: Read complete after 0s [name=governance]
data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure]
forgejo_repository_webhook.governance: Refreshing state...
forgejo_repository_webhook.infrastructure: Refreshing state...
cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p atlantis
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p atlantis
```

No changes. Your infrastructure matches the configuration.

16. project: `snot` dir: `.` workspace: `snot`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p snot
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p snot
```

No changes. Your infrastructure matches the configuration.

17. project: `openbao` dir: `.` workspace: `openbao`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818]
vault_policy.devops: Refreshing state... [id=devops]
data.vault_auth_backend.token: Reading...
vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt]
vault_policy.shared_read: Refreshing state... [id=shared-read]
vault_mount.kv: Refreshing state... [id=secret]
vault_identity_oidc.server: Refreshing state... [id=http://127.0.0.1:8200]
vault_policy.ci: Refreshing state... [id=ci]
vault_policy.infra: Refreshing state... [id=infra]
vault_identity_oidc_key.terranix: Refreshing state... [id=terranix]
data.vault_auth_backend.token: Read complete after 0s [id=token]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_policy.terranix_search_console: Refreshing state... [id=terranix-search-console]
vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix]
vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff]
vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f]
vault_auth_backend.approle: Refreshing state... [id=approle]
vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci]
vault_identity_entity.atlantis: Refreshing state... [id=dacc3864-d73d-d2ed-17a4-b679f82f8b00]
vault_identity_oidc_role.terranix_search_console: Refreshing state... [id=terranix-search-console]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
vault_token_auth_backend_role.atlantis: Refreshing state... [id=auth/token/roles/atlantis]
vault_identity_entity_alias.atlantis: Refreshing state... [id=d0726b56-3fff-d17e-af08-0da70c98e11c]
vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01]
vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01]
vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy]
vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01]
vault_approle_auth_backend_role.host["infra-03"]: Refreshing state... [id=auth/approle/role/infra-03]
keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870]
vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc]
vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default]
vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a]
vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9]
cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p openbao
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p openbao
```

No changes. Your infrastructure matches the configuration.

18. project: `posthog` dir: `.` workspace: `posthog`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding posthog/posthog versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing posthog/posthog v1.0.26 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed posthog/posthog v1.0.26 (unauthenticated)
- Using posthog/posthog v1.0.26 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - posthog/posthog
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
posthog_proxy_record.v: Refreshing state... [id=019cbbe2-8cae-0000-72a0-b7884cc7ec9e]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p posthog
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p posthog
```

No changes. Your infrastructure matches the configuration.

19. project: `vaultwarden` dir: `.` workspace: `vaultwarden`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p vaultwarden
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p vaultwarden
```

No changes. Your infrastructure matches the configuration.

20. project: `ricochet` dir: `.` workspace: `ricochet`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 1s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p ricochet
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p ricochet
```

No changes. Your infrastructure matches the configuration.

21. project: `webhook` dir: `.` workspace: `webhook`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Finding svalabs/forgejo versions matching "~> 1.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installing svalabs/forgejo v1.7.0 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed svalabs/forgejo v1.7.0 (unauthenticated)
- Using svalabs/forgejo v1.7.0 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│   - svalabs/forgejo
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.forgejo_repository.kennel: Reading...
data.forgejo_repository.kennel: Read complete after 0s [name=kennel]
forgejo_repository_webhook.kennel_renovate: Refreshing state...
cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p webhook
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p webhook
```

No changes. Your infrastructure matches the configuration.

22. project: `search-console` dir: `.` workspace: `search-console`

Show Output

Initializing the backend...

Successfully configured the backend "s3"! OpenTofu will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"...
- Finding hashicorp/random versions matching "~> 3.0"...
- Finding hashicorp/google versions matching "~> 7.0"...
- Finding keycloak/keycloak versions matching "~> 5.10"...
- Finding hashicorp/vault versions matching "~> 5.0"...
- Finding cloudflare/cloudflare versions matching "~> 5.0"...
- Installing hashicorp/vault v5.13.0 to the shared cache directory...
- Installing cloudflare/cloudflare v5.28.1 to the shared cache directory...
- Installing hashicorp/random v3.9.1 to the shared cache directory...
- Installing keycloak/keycloak v5.10.0 to the shared cache directory...
- Installing hashicorp/google v7.46.2 to the shared cache directory...
- Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory...
- Installed hashicorp/random v3.9.1 (unauthenticated)
- Using hashicorp/random v3.9.1 from the shared cache directory
- Installed keycloak/keycloak v5.10.0 (unauthenticated)
- Using keycloak/keycloak v5.10.0 from the shared cache directory
- Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated)
- Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory
- Installed hashicorp/vault v5.13.0 (unauthenticated)
- Using hashicorp/vault v5.13.0 from the shared cache directory
- Installed cloudflare/cloudflare v5.28.1 (unauthenticated)
- Using cloudflare/cloudflare v5.28.1 from the shared cache directory
- Installed hashicorp/google v7.46.2 (unauthenticated)
- Using hashicorp/google v7.46.2 from the shared cache directory

OpenTofu has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that OpenTofu can guarantee to make the same selections by default when
you run "tofu init" in the future.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

╷
│ Warning: Incomplete lock file information for providers
│ 
│ Due to your customized provider installation methods, OpenTofu was forced
│ to calculate lock file checksums locally for the following providers:
│   - cloudflare/cloudflare
│   - hashicorp/google
│   - hashicorp/random
│   - hashicorp/vault
│   - keycloak/keycloak
│   - registry.terraform.io/jkossis/garage
│ 
│ The current .terraform.lock.hcl file only includes checksums for
│ linux_amd64, so OpenTofu running on another platform will fail to install
│ these providers.
│ 
│ To calculate additional checksums for another platform, run:
│   tofu providers lock -platform=linux_amd64
│ (where linux_amd64 is the platform to generate)
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.google_site_verification_token.cmuservice_shop: Reading...
data.google_site_verification_token.cmuinsta_com: Reading...
data.google_site_verification_token.scottylabs_dev: Reading...
data.google_site_verification_token.cmu_courses: Reading...
data.google_site_verification_token.cmu_dev: Reading...
data.google_site_verification_token.cmumaps_com: Reading...
data.google_site_verification_token.cmugpt_com: Reading...
data.google_site_verification_token.occ_build: Reading...
data.google_site_verification_token.cmu_courses: Read complete after 1s [id=cmu.courses]
data.google_site_verification_token.scottylabs_net: Reading...
data.google_site_verification_token.scottylabs_dev: Read complete after 1s [id=scottylabs.dev]
data.google_site_verification_token.cmuinsta_com: Read complete after 1s [id=cmuinsta.com]
data.google_site_verification_token.cmugpt_com: Read complete after 1s [id=cmugpt.com]
data.google_site_verification_token.cmuservice_shop: Read complete after 1s [id=cmuservice.shop]
data.google_site_verification_token.occ_build: Read complete after 1s [id=occ.build]
data.google_site_verification_token.cmustudy_com: Reading...
data.google_site_verification_token.tartanhacks_com: Reading...
data.google_site_verification_token.cmu_quest: Reading...
data.google_site_verification_token.roomies_live: Reading...
data.google_site_verification_token.cmu_homes: Reading...
data.google_site_verification_token.scotty_lol: Reading...
data.google_site_verification_token.cmumaps_com: Read complete after 1s [id=cmumaps.com]
data.google_site_verification_token.cmucal_com: Reading...
data.google_site_verification_token.cmustudy_com: Read complete after 0s [id=cmustudy.com]
data.google_site_verification_token.tartanhacks_com: Read complete after 0s [id=tartanhacks.com]
data.google_site_verification_token.tartan_vote: Reading...
data.google_site_verification_token.cmubulletin_com: Reading...
data.google_site_verification_token.cmu_quest: Read complete after 0s [id=cmu.quest]
data.google_site_verification_token.scottylabs_net: Read complete after 0s [id=scottylabs.net]
data.google_site_verification_token.cmu_homes: Read complete after 0s [id=cmu.homes]
data.google_site_verification_token.cmucourses_com: Reading...
data.google_site_verification_token.cmu_guide: Reading...
data.google_site_verification_token.cmuhousing_com: Reading...
data.google_site_verification_token.roomies_live: Read complete after 0s [id=roomies.live]
data.google_site_verification_token.scotty_lol: Read complete after 0s [id=scotty.lol]
data.google_site_verification_token.tartanhacks_org: Reading...
data.google_site_verification_token.cmueats_com: Reading...
data.google_site_verification_token.andrew-inbox_com: Reading...
data.google_site_verification_token.cmucal_com: Read complete after 0s [id=cmucal.com]
data.google_site_verification_token.cmu_dev: Read complete after 1s [id=cmu.dev]
data.google_site_verification_token.doggylabs_org: Reading...
data.google_site_verification_token.scottylabs_org: Reading...
data.google_site_verification_token.tartan_vote: Read complete after 0s [id=tartan.vote]
data.google_site_verification_token.cmubulletin_com: Read complete after 0s [id=cmubulletin.com]
data.google_site_verification_token.cmu_guide: Read complete after 0s [id=cmu.guide]
data.google_site_verification_token.terrier_build: Reading...
data.google_site_verification_token.rent-pgh_com: Reading...
data.google_site_verification_token.cmu_lol: Reading...
data.google_site_verification_token.cmucourses_com: Read complete after 0s [id=cmucourses.com]
data.google_site_verification_token.cmu_do: Reading...
data.google_site_verification_token.cmuhousing_com: Read complete after 0s [id=cmuhousing.com]
data.google_site_verification_token.cmueats_com: Read complete after 0s [id=cmueats.com]
data.google_site_verification_token.collegecart_org: Reading...
data.keycloak_realm.scottylabs: Reading...
data.google_site_verification_token.tartanhacks_org: Read complete after 0s [id=tartanhacks.org]
data.google_site_verification_token.andrew-inbox_com: Read complete after 0s [id=andrew-inbox.com]
data.google_site_verification_token.doggylabs_org: Read complete after 0s [id=doggylabs.org]
data.google_site_verification_token.scottylabs_org: Read complete after 0s [id=scottylabs.org]
data.google_site_verification_token.rent-pgh_com: Read complete after 0s [id=rent-pgh.com]
data.google_site_verification_token.terrier_build: Read complete after 0s [id=terrier.build]
data.google_site_verification_token.cmu_lol: Read complete after 0s [id=cmu.lol]
data.google_site_verification_token.cmu_do: Read complete after 0s [id=cmu.do]
data.google_site_verification_token.collegecart_org: Read complete after 0s [id=collegecart.org]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
cloudflare_dns_record.this["scotty.lol-search-console"]: Refreshing state... [id=cba5f67947530d8a1386fb7e4a606237]
cloudflare_dns_record.this["cmueats.com-search-console"]: Refreshing state... [id=04432bb482471ce2c2852d36090ab199]
cloudflare_dns_record.this["cmu.dev-search-console"]: Refreshing state... [id=a22c11c13e8bc14f8391ea00cc0a2acc]
cloudflare_dns_record.this["cmu.do-search-console"]: Refreshing state... [id=fad736d884eb893aea9670c528958790]
cloudflare_dns_record.this["scottylabs.org-search-console"]: Refreshing state... [id=afe998ea60845634af5eaaa02dd4704a]
cloudflare_dns_record.this["cmustudy.com-search-console"]: Refreshing state... [id=fc5f9b866364a4dfdff4b03351327116]
cloudflare_dns_record.this["scottylabs.net-search-console"]: Refreshing state... [id=0bb7922bb08af956a750bfbb6b1d0a43]
cloudflare_dns_record.this["cmugpt.com-search-console"]: Refreshing state... [id=cb856bb5376d669aefd3bafe911b69fb]
cloudflare_dns_record.this["rent-pgh.com-search-console"]: Refreshing state... [id=95b1ac39812457a57127d9074b166c14]
cloudflare_dns_record.this["doggylabs.org-search-console"]: Refreshing state... [id=d7898645fdfbd05ce0ca9473e57bda4f]
cloudflare_dns_record.this["cmucal.com-search-console"]: Refreshing state... [id=069646d798555f20775a10f8d3593234]
cloudflare_dns_record.this["cmu.lol-search-console"]: Refreshing state... [id=7254f9648874e0f65f74b5e60571a6b4]
cloudflare_dns_record.this["andrew-inbox.com-search-console"]: Refreshing state... [id=6734312208e0406bc73c77c8c3ac9dfb]
cloudflare_dns_record.this["terrier.build-search-console"]: Refreshing state... [id=0e5bed4022996e6bd162792fec3f37f3]
cloudflare_dns_record.this["scottylabs.dev-search-console"]: Refreshing state... [id=864f25d2422df08b9c86ecc944fe8fc0]
cloudflare_dns_record.this["cmu.guide-search-console"]: Refreshing state... [id=66e17aaca6761b9163be4bd1f5fbf6bb]
cloudflare_dns_record.this["cmuservice.shop-search-console"]: Refreshing state... [id=c79945c8f4974682fb38d45dc289e493]
cloudflare_dns_record.this["cmu.quest-search-console"]: Refreshing state... [id=f9fec9b575c83acbab3b0af5dc76523c]
cloudflare_dns_record.this["collegecart.org-search-console"]: Refreshing state... [id=20511a9991cb1a4f56806982ea13e3d4]
cloudflare_dns_record.this["tartan.vote-search-console"]: Refreshing state... [id=cf58032f4dbd3111d60cb1b0216b4c0d]
cloudflare_dns_record.this["cmucourses.com-search-console"]: Refreshing state... [id=ba941c528e666894af829920d1beb90b]
cloudflare_dns_record.this["cmu.homes-search-console"]: Refreshing state... [id=e83789c146bcc6bbe07ef3cf55d3a978]
cloudflare_dns_record.this["cmubulletin.com-search-console"]: Refreshing state... [id=da521a014f7a08e306f07ba5c20d3ae4]
cloudflare_dns_record.this["occ.build-search-console"]: Refreshing state... [id=fa869e3a71d6b4c172e3940ce642766f]
cloudflare_dns_record.this["roomies.live-search-console"]: Refreshing state... [id=e46a5c3a36953cc65f1d2f7b6c3ff169]
cloudflare_dns_record.this["tartanhacks.com-search-console"]: Refreshing state... [id=093a2016c43e55f3757f7a68c33b4a57]
cloudflare_dns_record.this["cmuhousing.com-search-console"]: Refreshing state... [id=3723f3c3d58a68f29d506cf44272c4fe]
cloudflare_dns_record.this["cmumaps.com-search-console"]: Refreshing state... [id=53f56e3ab57a1d5b8299ec543ec4b666]
cloudflare_dns_record.this["tartanhacks.org-search-console"]: Refreshing state... [id=9936d3f55b67b5df603204b205ff387a]
cloudflare_dns_record.this["cmu.courses-search-console"]: Refreshing state... [id=4da145a3e7fcc2ac10ef01c381449c40]
cloudflare_dns_record.this["cmuinsta.com-search-console"]: Refreshing state... [id=c9296c84e333ba72c2ae69ecb93c6857]
google_site_verification_web_resource.terrier_build: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build]
google_site_verification_web_resource.scottylabs_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev]
google_site_verification_web_resource.cmu_courses: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses]
google_site_verification_web_resource.occ_build: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build]
google_site_verification_web_resource.roomies_live: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live]
google_site_verification_web_resource.cmu_guide: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide]
google_site_verification_web_resource.scotty_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol]
google_site_verification_web_resource.andrew-inbox_com: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com]
google_site_verification_web_resource.cmu_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol]
google_site_verification_web_resource.rent-pgh_com: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com]
google_site_verification_web_resource.cmubulletin_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com]
google_site_verification_web_resource.collegecart_org: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org]
google_site_verification_web_resource.cmugpt_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com]
google_site_verification_web_resource.cmumaps_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com]
google_site_verification_web_resource.tartanhacks_org: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org]
google_site_verification_web_resource.tartan_vote: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote]
google_site_verification_web_resource.cmustudy_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com]
google_site_verification_web_resource.doggylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org]
google_site_verification_web_resource.cmu_quest: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest]
google_site_verification_web_resource.cmuinsta_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com]
google_site_verification_web_resource.cmuservice_shop: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop]
google_site_verification_web_resource.scottylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org]
google_site_verification_web_resource.scottylabs_net: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net]
google_site_verification_web_resource.cmu_homes: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes]
google_site_verification_web_resource.cmuhousing_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com]
google_site_verification_web_resource.cmucal_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com]
google_site_verification_web_resource.cmu_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev]
google_site_verification_web_resource.tartanhacks_com: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com]
google_site_verification_web_resource.cmucourses_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com]
google_site_verification_web_resource.cmu_do: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do]
google_site_verification_web_resource.cmueats_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com]
google_site_verification_owner.terrier_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/ops@scottylabs.org]
google_site_verification_owner.terrier_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/admin@scottylabs.org]
google_site_verification_owner.rent-pgh_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/ops@scottylabs.org]
google_site_verification_owner.rent-pgh_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/admin@scottylabs.org]
google_site_verification_owner.andrew-inbox_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/admin@scottylabs.org]
google_site_verification_owner.andrew-inbox_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/ops@scottylabs.org]
google_site_verification_owner.scottylabs_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/ops@scottylabs.org]
google_site_verification_owner.scottylabs_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/admin@scottylabs.org]
google_site_verification_owner.cmu_courses_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/ops@scottylabs.org]
google_site_verification_owner.cmu_courses_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/admin@scottylabs.org]
google_site_verification_owner.occ_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/ops@scottylabs.org]
google_site_verification_owner.cmubulletin_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/ops@scottylabs.org]
google_site_verification_owner.occ_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/admin@scottylabs.org]
google_site_verification_owner.cmubulletin_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/admin@scottylabs.org]
google_site_verification_owner.scotty_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/ops@scottylabs.org]
google_site_verification_owner.scotty_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/admin@scottylabs.org]
google_site_verification_owner.collegecart_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/ops@scottylabs.org]
google_site_verification_owner.collegecart_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/admin@scottylabs.org]
google_site_verification_owner.cmumaps_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/ops@scottylabs.org]
google_site_verification_owner.cmumaps_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/admin@scottylabs.org]
google_site_verification_owner.cmugpt_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/ops@scottylabs.org]
google_site_verification_owner.cmugpt_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/admin@scottylabs.org]
google_site_verification_owner.tartan_vote_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/admin@scottylabs.org]
google_site_verification_owner.tartan_vote_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/ops@scottylabs.org]
google_site_verification_owner.tartanhacks_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/admin@scottylabs.org]
google_site_verification_owner.cmu_guide_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/admin@scottylabs.org]
google_site_verification_owner.tartanhacks_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/ops@scottylabs.org]
google_site_verification_owner.cmu_guide_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/ops@scottylabs.org]
google_site_verification_owner.cmu_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/admin@scottylabs.org]
google_site_verification_owner.cmu_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/ops@scottylabs.org]
google_site_verification_owner.roomies_live_ops: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/ops@scottylabs.org]
google_site_verification_owner.cmuinsta_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/ops@scottylabs.org]
google_site_verification_owner.roomies_live_admin: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/admin@scottylabs.org]
google_site_verification_owner.cmuinsta_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/admin@scottylabs.org]
google_site_verification_owner.cmustudy_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/ops@scottylabs.org]
google_site_verification_owner.cmu_quest_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/admin@scottylabs.org]
google_site_verification_owner.cmustudy_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/admin@scottylabs.org]
google_site_verification_owner.cmu_quest_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/ops@scottylabs.org]
google_site_verification_owner.doggylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/admin@scottylabs.org]
google_site_verification_owner.doggylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/ops@scottylabs.org]
google_site_verification_owner.scottylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/ops@scottylabs.org]
google_site_verification_owner.scottylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/admin@scottylabs.org]
google_site_verification_owner.cmuservice_shop_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/admin@scottylabs.org]
google_site_verification_owner.cmuservice_shop_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/ops@scottylabs.org]
google_site_verification_owner.cmu_homes_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/admin@scottylabs.org]
google_site_verification_owner.cmu_homes_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/ops@scottylabs.org]
google_site_verification_owner.cmuhousing_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/ops@scottylabs.org]
google_site_verification_owner.cmuhousing_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/admin@scottylabs.org]
google_site_verification_owner.cmucal_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/admin@scottylabs.org]
google_site_verification_owner.cmucal_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/ops@scottylabs.org]
google_site_verification_owner.scottylabs_net_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/admin@scottylabs.org]
google_site_verification_owner.scottylabs_net_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/ops@scottylabs.org]
google_site_verification_owner.cmu_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/admin@scottylabs.org]
google_site_verification_owner.cmu_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/ops@scottylabs.org]
google_site_verification_owner.cmu_do_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/ops@scottylabs.org]
google_site_verification_owner.cmu_do_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/admin@scottylabs.org]
google_site_verification_owner.cmucourses_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/ops@scottylabs.org]
google_site_verification_owner.cmucourses_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/admin@scottylabs.org]
google_site_verification_owner.cmueats_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/ops@scottylabs.org]
google_site_verification_owner.cmueats_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/admin@scottylabs.org]
google_site_verification_owner.tartanhacks_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/ops@scottylabs.org]
google_site_verification_owner.tartanhacks_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/admin@scottylabs.org]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p search-console
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p search-console
```

No changes. Your infrastructure matches the configuration.

Plan Summary

22 projects, 1 with changes, 21 with no changes, 0 failed

⏩ To apply all unapplied plans from this Pull Request, comment:
```
atlantis apply
```
🚮 To delete all plans and locks from this Pull Request, comment:
```
atlantis unlock
```

Ran Plan for 22 projects: 1. project: `occ` dir: `.` workspace: `occ` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `mail` dir: `.` workspace: `mail` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `nixbot` dir: `.` workspace: `nixbot` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `search-console` dir: `.` workspace: `search-console` --- ### 1. project: `occ` dir: `.` workspace: `occ` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] cloudflare_dns_record.this["incus"]: Refreshing state... [id=68d4d1524c79e8faf2eb4b01f8eeda5c] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p occ ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Focc%252Focc) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p occ ``` No changes. Your infrastructure matches the configuration. --- ### 2. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_policy.governance: Refreshing state... [id=governance] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe] data.keycloak_openid_client.realm_management: Reading... data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484] keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a] keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966] vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET] vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p governance ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgovernance%252Fgovernance) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p governance ``` No changes. Your infrastructure matches the configuration. --- ### 3. project: `mail` dir: `.` workspace: `mail` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] cloudflare_dns_record.this["scottylabs-org-mx"]: Refreshing state... [id=01791245a3e69e14b1a4b8f3801b0677] cloudflare_dns_record.this["scottylabs-dev-dkim"]: Refreshing state... [id=8f81d427fc9a20433b2b768a2820753a] cloudflare_email_sending_subdomain.cmu-dev: Refreshing state... [id=fcca671bdc8e46e4ad9efb669e3a190c] cloudflare_dns_record.this["scottylabs-org-dkim"]: Refreshing state... [id=0c3e8525e281a85dcd4f127e7babb35d] cloudflare_email_sending_subdomain.scottylabs-org: Refreshing state... [id=d861e202e90146f49239f7f638bdb871] cloudflare_dns_record.this["scottylabs-dev-spf"]: Refreshing state... [id=e78ffa0bc6095aafd2067c900f929b50] cloudflare_dns_record.this["scottylabs-dev-mx"]: Refreshing state... [id=b4e4301c200d52f66335bb93c7f3b9dd] cloudflare_dns_record.this["scottylabs-org-spf"]: Refreshing state... [id=6075ba34182127d6149528376bda1a6a] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p mail ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmail%252Fmail) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p mail ``` No changes. Your infrastructure matches the configuration. --- ### 4. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s random_password.garage_webadmin_jwt: Refreshing state... [id=none] vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185] cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1] keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf] vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p garage-webadmin ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgarage-webadmin%252Fgarage-webadmin) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p garage-webadmin ``` No changes. Your infrastructure matches the configuration. --- ### 5. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_policy.kennel: Refreshing state... [id=kennel] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f] cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69] cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p kennel ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkennel%252Fkennel) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p kennel ``` No changes. Your infrastructure matches the configuration. --- ### 6. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s random_password.headplane_cookie: Refreshing state... [id=none] vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8] keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac] cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20] cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00] keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210] vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc] keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7] vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p headscale ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fheadscale%252Fheadscale) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p headscale ``` No changes. Your infrastructure matches the configuration. --- ### 7. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada] cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p matrix ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmatrix%252Fmatrix) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p matrix ``` No changes. Your infrastructure matches the configuration. --- ### 8. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960] garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725] garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6] keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198] vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage] vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p forgejo ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fforgejo%252Fforgejo) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p forgejo ``` No changes. Your infrastructure matches the configuration. --- ### 9. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s random_password.cli_proxy_api_key: Refreshing state... [id=none] random_password.litellm_salt_key: Refreshing state... [id=none] random_password.litellm_master_key: Refreshing state... [id=none] vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key] vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key] vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509] keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f] cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44] vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p litellm ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Flitellm%252Flitellm) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p litellm ``` No changes. Your infrastructure matches the configuration. --- ### 10. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5bad63854979cad3d5b8b2a9b97aae67"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["388da333f823d55e3d5cfbd686303ed4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https] cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d] cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997] cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c] cloudflare_dns_record.this["infra-03"]: Refreshing state... [id=9172a8cbcb80ce7c1ed2cae96e820659] cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee] cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p hosts ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fhosts%252Fhosts) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p hosts ``` No changes. Your infrastructure matches the configuration. --- ### 11. project: `nixbot` dir: `.` workspace: `nixbot` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding svalabs/forgejo versions matching "~> 1.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing svalabs/forgejo v1.7.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed svalabs/forgejo v1.7.0 (unauthenticated) - Using svalabs/forgejo v1.7.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ - svalabs/forgejo │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.nixbot_forgejo: Refreshing state... [id=none] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s forgejo_user.nixbot: Refreshing state... forgejo_team.nixbot: Refreshing state... [name=nixbot] forgejo_team_member.nixbot: Refreshing state... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.nixbot: Refreshing state... [id=a45a253b-c5ce-4a75-91cd-c7876354e731] vault_kv_secret_v2.nixbot_oidc: Refreshing state... [id=secret/data/infra/nixbot-oidc] cloudflare_dns_record.this["nixbot"]: Refreshing state... [id=715d7a325208700119db81c024eaf46f] forgejo_personal_access_token.nixbot: Refreshing state... [name=nixbot] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s vault_kv_secret_v2.nixbot_forgejo: Refreshing state... [id=secret/data/infra/nixbot-forgejo] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p nixbot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fnixbot%252Fnixbot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p nixbot ``` No changes. Your infrastructure matches the configuration. --- ### 12. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.grafana_secret_key: Refreshing state... [id=none] vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c] garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470] garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c] garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3] garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c] vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3] garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470] keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e] garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c] vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3] vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc] cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0] cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p observability ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fobservability%252Fobservability) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p observability ``` No changes. Your infrastructure matches the configuration. --- ### 13. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_api_token_permission_groups_list.all: Reading... data.cloudflare_api_token_permission_groups_list.all: Read complete after 0s cloudflare_api_token.terranix-dns: Refreshing state... [id=3096f3be78d1baa0ac9e7447414df53b] cloudflare_api_token.terranix-mail: Refreshing state... [id=88156a4eb6d0856486ce00aed9b99012] cloudflare_api_token.terranix-hosts: Refreshing state... [id=df616c9aae907d8b1442ce79d2f000b2] cloudflare_api_token.smtp: Refreshing state... [id=6b334833d9de2b35b22769ba27265f71] vault_kv_secret_v2.cloudflare_terranix-mail: Refreshing state... [id=secret/data/infra/cloudflare-terranix-mail] vault_kv_secret_v2.cloudflare_terranix-dns: Refreshing state... [id=secret/data/infra/cloudflare-terranix-dns] vault_kv_secret_v2.cloudflare_smtp: Refreshing state... [id=secret/data/infra/cloudflare-smtp] vault_kv_secret_v2.cloudflare_terranix-hosts: Refreshing state... [id=secret/data/infra/cloudflare-terranix-hosts] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p cloudflare-tokens ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fcloudflare-tokens%252Fcloudflare-tokens) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p cloudflare-tokens ``` No changes. Your infrastructure matches the configuration. --- ### 14. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/397k0bnzj4zdhk2pcnlhkfxfs5hfl61k-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.vault_kv_secret_v2.keycloak_idp: Reading... ephemeral.vault_kv_secret_v2.keycloak_ldap: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.forgejo_idp: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.forgejo_idp: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak_ldap: Open complete after 0s data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] data.keycloak_realm.master: Reading... data.keycloak_realm.scottylabs: Reading... keycloak_realm.scottylabs: Refreshing state... [id=scottylabs] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.keycloak_realm.master: Read complete after 0s [id=master] keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev] keycloak_oidc_identity_provider.apple: Refreshing state... [id=apple] keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google] keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA] data.keycloak_role.master_admin: Reading... keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu] keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack] data.keycloak_role.master_admin: Read complete after 1s [id=b8fc6ad5-7b83-4d86-9227-620c8e50e720] keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml] cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc] keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de] keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2] keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556] keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7] keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc] keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0] keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs] keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac] keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae] keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d] keycloak_custom_identity_provider_mapper.apple_id: Refreshing state... [id=81993bf9-93bf-40fd-9b59-0909abb570f2] keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7] keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113] keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d] keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802] keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9] keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1] keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da] keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784] keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505] keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29] keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f] keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651] keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377] keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f] keycloak_custom_identity_provider_mapper.apple_email: Refreshing state... [id=68841e9f-a367-4c71-ac26-668ac8e559ad] keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6] keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b] keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290] keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60] keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115] keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded] keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s ephemeral.vault_kv_secret_v2.keycloak_ldap: Closing... ephemeral.vault_kv_secret_v2.keycloak_ldap: Close complete after 0s ephemeral.vault_kv_secret_v2.forgejo_idp: Closing... ephemeral.vault_kv_secret_v2.forgejo_idp: Close complete after 0s OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + create OpenTofu will perform the following actions: # keycloak_custom_identity_provider_mapper.master_devops_admin will be created + resource "keycloak_custom_identity_provider_mapper" "master_devops_admin" { + extra_config = { + "are.claim.values.regex" = "false" + "claims" = jsonencode( [ + { + key = "groups" + value = "/projects/devops/admins" }, ] ) + "role" = "admin" + "syncMode" = "FORCE" } + id = (known after apply) + identity_provider_alias = "scottylabs" + identity_provider_mapper = "oidc-advanced-role-idp-mapper" + name = "devops-admin" + realm = "master" } # keycloak_oidc_identity_provider.master_scottylabs will be created + resource "keycloak_oidc_identity_provider" "master_scottylabs" { + accepts_prompt_none_forward_from_client = false + add_read_token_role_on_create = false + alias = "scottylabs" + authenticate_by_default = false + authorization_url = "https://idp.scottylabs.org/realms/scottylabs/protocol/openid-connect/auth" + backchannel_supported = true + client_id = "keycloak-master" + client_secret = (sensitive value) + client_secret_wo = (write-only attribute) + default_scopes = "openid profile email" + disable_type_claim_check = false + disable_user_info = false + display_name = "ScottyLabs" + enabled = true + extra_config = { + "clientAuthMethod" = "client_secret_post" } + first_broker_login_flow_alias = "first broker login" + hide_on_login_page = false + id = (known after apply) + internal_id = (known after apply) + issuer = "https://idp.scottylabs.org/realms/scottylabs" + jwks_url = "https://idp.scottylabs.org/realms/scottylabs/protocol/openid-connect/certs" + link_only = false + org_redirect_mode_email_matches = false + provider_id = "oidc" + realm = "master" + store_token = false + sync_mode = "FORCE" + token_url = "https://idp.scottylabs.org/realms/scottylabs/protocol/openid-connect/token" + trust_email = true + ui_locales = false + user_info_url = "https://idp.scottylabs.org/realms/scottylabs/protocol/openid-connect/userinfo" + validate_signature = true } # keycloak_openid_client.keycloak_master will be created + resource "keycloak_openid_client" "keycloak_master" { + access_token_lifespan = (known after apply) + access_type = "CONFIDENTIAL" + always_display_in_console = false + backchannel_logout_session_required = true + client_authenticator_type = "client-secret" + client_id = "keycloak-master" + client_offline_session_idle_timeout = (known after apply) + client_offline_session_max_lifespan = (known after apply) + client_secret = (sensitive value) + client_secret_wo = (write-only attribute) + client_session_idle_timeout = (known after apply) + client_session_max_lifespan = (known after apply) + consent_required = (known after apply) + direct_access_grants_enabled = false + display_on_consent_screen = (known after apply) + enabled = true + exclude_issuer_from_auth_response = (known after apply) + exclude_session_state_from_auth_response = (known after apply) + frontchannel_logout_enabled = (known after apply) + full_scope_allowed = true + id = (known after apply) + implicit_flow_enabled = (known after apply) + import = false + name = "Keycloak admin console" + oauth2_device_authorization_grant_enabled = false + oauth2_jwt_authorization_grant_enabled = false + realm_id = "scottylabs" + require_dpop_bound_tokens = (known after apply) + resource_server_id = (known after apply) + service_account_user_id = (known after apply) + service_accounts_enabled = (known after apply) + standard_flow_enabled = true + standard_token_exchange_enabled = false + use_refresh_tokens = true + use_refresh_tokens_client_credentials = false + valid_post_logout_redirect_uris = (known after apply) + valid_redirect_uris = [ + "https://idp.scottylabs.org/realms/master/broker/scottylabs/endpoint", ] + web_origins = (known after apply) } # keycloak_openid_client.terranix will be created + resource "keycloak_openid_client" "terranix" { + access_token_lifespan = (known after apply) + access_type = "CONFIDENTIAL" + always_display_in_console = false + backchannel_logout_session_required = true + client_authenticator_type = "client-secret" + client_id = "terranix" + client_offline_session_idle_timeout = (known after apply) + client_offline_session_max_lifespan = (known after apply) + client_secret = (sensitive value) + client_secret_wo = (write-only attribute) + client_session_idle_timeout = (known after apply) + client_session_max_lifespan = (known after apply) + consent_required = (known after apply) + direct_access_grants_enabled = false + display_on_consent_screen = (known after apply) + enabled = true + exclude_issuer_from_auth_response = (known after apply) + exclude_session_state_from_auth_response = (known after apply) + frontchannel_logout_enabled = (known after apply) + full_scope_allowed = true + id = (known after apply) + implicit_flow_enabled = (known after apply) + import = false + name = "terranix" + oauth2_device_authorization_grant_enabled = false + oauth2_jwt_authorization_grant_enabled = false + realm_id = "master" + require_dpop_bound_tokens = (known after apply) + resource_server_id = (known after apply) + service_account_user_id = (known after apply) + service_accounts_enabled = true + standard_flow_enabled = false + standard_token_exchange_enabled = false + use_refresh_tokens = true + use_refresh_tokens_client_credentials = false + valid_post_logout_redirect_uris = (known after apply) + valid_redirect_uris = (known after apply) + web_origins = (known after apply) } # keycloak_openid_client_service_account_realm_role.terranix_admin will be created + resource "keycloak_openid_client_service_account_realm_role" "terranix_admin" { + id = (known after apply) + realm_id = "master" + role = "admin" + service_account_user_id = (known after apply) } # keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups will be created + resource "keycloak_openid_group_membership_protocol_mapper" "keycloak_master_groups" { + add_to_access_token = true + add_to_id_token = true + add_to_token_introspection = false + add_to_userinfo = true + claim_name = "groups" + client_id = (known after apply) + full_path = true + id = (known after apply) + name = "groups" + realm_id = "scottylabs" } # vault_kv_secret_v2.keycloak_terranix will be created + resource "vault_kv_secret_v2" "keycloak_terranix" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "infra/keycloak-terranix" + path = (known after apply) + custom_metadata (known after apply) } Plan: 7 to add, 0 to change, 0 to destroy. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.keycloak_idp, │ on config.tf.json line 21, in data.vault_kv_secret_v2.keycloak_idp: │ 21: } │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and one more similar warning elsewhere) ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_oidc_google_identity_provider.google, │ on config.tf.json line 485, in resource.keycloak_oidc_google_identity_provider.google: │ 485: } │ │ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead ╵ ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/183/keycloak/keycloak-keycloak.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/183/keycloak/keycloak-keycloak.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p keycloak ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkeycloak%252Fkeycloak) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ``` Plan: 7 to add, 0 to change, 0 to destroy. --- ### 15. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding svalabs/forgejo versions matching "~> 1.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing svalabs/forgejo v1.7.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed svalabs/forgejo v1.7.0 (unauthenticated) - Using svalabs/forgejo v1.7.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ - svalabs/forgejo │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.atlantis_webhook_secret: Refreshing state... [id=none] vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.forgejo_repository.governance: Reading... data.forgejo_repository.infrastructure: Reading... data.forgejo_repository.governance: Read complete after 0s [name=governance] data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure] forgejo_repository_webhook.governance: Refreshing state... forgejo_repository_webhook.infrastructure: Refreshing state... cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p atlantis ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fatlantis%252Fatlantis) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p atlantis ``` No changes. Your infrastructure matches the configuration. --- ### 16. project: `snot` dir: `.` workspace: `snot` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p snot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fsnot%252Fsnot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p snot ``` No changes. Your infrastructure matches the configuration. --- ### 17. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818] vault_policy.devops: Refreshing state... [id=devops] data.vault_auth_backend.token: Reading... vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt] vault_policy.shared_read: Refreshing state... [id=shared-read] vault_mount.kv: Refreshing state... [id=secret] vault_identity_oidc.server: Refreshing state... [id=http://127.0.0.1:8200] vault_policy.ci: Refreshing state... [id=ci] vault_policy.infra: Refreshing state... [id=infra] vault_identity_oidc_key.terranix: Refreshing state... [id=terranix] data.vault_auth_backend.token: Read complete after 0s [id=token] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_policy.terranix_search_console: Refreshing state... [id=terranix-search-console] vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix] vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff] vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f] vault_auth_backend.approle: Refreshing state... [id=approle] vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci] vault_identity_entity.atlantis: Refreshing state... [id=dacc3864-d73d-d2ed-17a4-b679f82f8b00] vault_identity_oidc_role.terranix_search_console: Refreshing state... [id=terranix-search-console] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s vault_token_auth_backend_role.atlantis: Refreshing state... [id=auth/token/roles/atlantis] vault_identity_entity_alias.atlantis: Refreshing state... [id=d0726b56-3fff-d17e-af08-0da70c98e11c] vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01] vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01] vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy] vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01] vault_approle_auth_backend_role.host["infra-03"]: Refreshing state... [id=auth/approle/role/infra-03] keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870] vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc] vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default] vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a] vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9] cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p openbao ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fopenbao%252Fopenbao) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p openbao ``` No changes. Your infrastructure matches the configuration. --- ### 18. project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding posthog/posthog versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing posthog/posthog v1.0.26 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed posthog/posthog v1.0.26 (unauthenticated) - Using posthog/posthog v1.0.26 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - posthog/posthog │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s posthog_proxy_record.v: Refreshing state... [id=019cbbe2-8cae-0000-72a0-b7884cc7ec9e] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p posthog ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fposthog%252Fposthog) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p posthog ``` No changes. Your infrastructure matches the configuration. --- ### 19. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p vaultwarden ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fvaultwarden%252Fvaultwarden) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p vaultwarden ``` No changes. Your infrastructure matches the configuration. --- ### 20. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/vault versions matching "~> 5.0"... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 1s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p ricochet ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fricochet%252Fricochet) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p ricochet ``` No changes. Your infrastructure matches the configuration. --- ### 21. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Finding svalabs/forgejo versions matching "~> 1.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/random versions matching "~> 3.0"... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installing svalabs/forgejo v1.7.0 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed svalabs/forgejo v1.7.0 (unauthenticated) - Using svalabs/forgejo v1.7.0 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ - svalabs/forgejo │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.forgejo_repository.kennel: Reading... data.forgejo_repository.kennel: Read complete after 0s [name=kennel] forgejo_repository_webhook.kennel_renovate: Refreshing state... cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p webhook ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fwebhook%252Fwebhook) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p webhook ``` No changes. Your infrastructure matches the configuration. --- ### 22. project: `search-console` dir: `.` workspace: `search-console` <details><summary>Show Output</summary> ```diff Initializing the backend... Successfully configured the backend "s3"! OpenTofu will automatically use this backend unless the backend configuration changes. Initializing provider plugins... - Finding registry.terraform.io/jkossis/garage versions matching "~> 1.0"... - Finding hashicorp/random versions matching "~> 3.0"... - Finding hashicorp/google versions matching "~> 7.0"... - Finding keycloak/keycloak versions matching "~> 5.10"... - Finding hashicorp/vault versions matching "~> 5.0"... - Finding cloudflare/cloudflare versions matching "~> 5.0"... - Installing hashicorp/vault v5.13.0 to the shared cache directory... - Installing cloudflare/cloudflare v5.28.1 to the shared cache directory... - Installing hashicorp/random v3.9.1 to the shared cache directory... - Installing keycloak/keycloak v5.10.0 to the shared cache directory... - Installing hashicorp/google v7.46.2 to the shared cache directory... - Installing registry.terraform.io/jkossis/garage v1.0.5 to the shared cache directory... - Installed hashicorp/random v3.9.1 (unauthenticated) - Using hashicorp/random v3.9.1 from the shared cache directory - Installed keycloak/keycloak v5.10.0 (unauthenticated) - Using keycloak/keycloak v5.10.0 from the shared cache directory - Installed registry.terraform.io/jkossis/garage v1.0.5 (unauthenticated) - Using registry.terraform.io/jkossis/garage v1.0.5 from the shared cache directory - Installed hashicorp/vault v5.13.0 (unauthenticated) - Using hashicorp/vault v5.13.0 from the shared cache directory - Installed cloudflare/cloudflare v5.28.1 (unauthenticated) - Using cloudflare/cloudflare v5.28.1 from the shared cache directory - Installed hashicorp/google v7.46.2 (unauthenticated) - Using hashicorp/google v7.46.2 from the shared cache directory OpenTofu has created a lock file .terraform.lock.hcl to record the provider selections it made above. Include this file in your version control repository so that OpenTofu can guarantee to make the same selections by default when you run "tofu init" in the future. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ ╷ │ Warning: Incomplete lock file information for providers │ │ Due to your customized provider installation methods, OpenTofu was forced │ to calculate lock file checksums locally for the following providers: │ - cloudflare/cloudflare │ - hashicorp/google │ - hashicorp/random │ - hashicorp/vault │ - keycloak/keycloak │ - registry.terraform.io/jkossis/garage │ │ The current .terraform.lock.hcl file only includes checksums for │ linux_amd64, so OpenTofu running on another platform will fail to install │ these providers. │ │ To calculate additional checksums for another platform, run: │ tofu providers lock -platform=linux_amd64 │ (where linux_amd64 is the platform to generate) ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.google_site_verification_token.cmuservice_shop: Reading... data.google_site_verification_token.cmuinsta_com: Reading... data.google_site_verification_token.scottylabs_dev: Reading... data.google_site_verification_token.cmu_courses: Reading... data.google_site_verification_token.cmu_dev: Reading... data.google_site_verification_token.cmumaps_com: Reading... data.google_site_verification_token.cmugpt_com: Reading... data.google_site_verification_token.occ_build: Reading... data.google_site_verification_token.cmu_courses: Read complete after 1s [id=cmu.courses] data.google_site_verification_token.scottylabs_net: Reading... data.google_site_verification_token.scottylabs_dev: Read complete after 1s [id=scottylabs.dev] data.google_site_verification_token.cmuinsta_com: Read complete after 1s [id=cmuinsta.com] data.google_site_verification_token.cmugpt_com: Read complete after 1s [id=cmugpt.com] data.google_site_verification_token.cmuservice_shop: Read complete after 1s [id=cmuservice.shop] data.google_site_verification_token.occ_build: Read complete after 1s [id=occ.build] data.google_site_verification_token.cmustudy_com: Reading... data.google_site_verification_token.tartanhacks_com: Reading... data.google_site_verification_token.cmu_quest: Reading... data.google_site_verification_token.roomies_live: Reading... data.google_site_verification_token.cmu_homes: Reading... data.google_site_verification_token.scotty_lol: Reading... data.google_site_verification_token.cmumaps_com: Read complete after 1s [id=cmumaps.com] data.google_site_verification_token.cmucal_com: Reading... data.google_site_verification_token.cmustudy_com: Read complete after 0s [id=cmustudy.com] data.google_site_verification_token.tartanhacks_com: Read complete after 0s [id=tartanhacks.com] data.google_site_verification_token.tartan_vote: Reading... data.google_site_verification_token.cmubulletin_com: Reading... data.google_site_verification_token.cmu_quest: Read complete after 0s [id=cmu.quest] data.google_site_verification_token.scottylabs_net: Read complete after 0s [id=scottylabs.net] data.google_site_verification_token.cmu_homes: Read complete after 0s [id=cmu.homes] data.google_site_verification_token.cmucourses_com: Reading... data.google_site_verification_token.cmu_guide: Reading... data.google_site_verification_token.cmuhousing_com: Reading... data.google_site_verification_token.roomies_live: Read complete after 0s [id=roomies.live] data.google_site_verification_token.scotty_lol: Read complete after 0s [id=scotty.lol] data.google_site_verification_token.tartanhacks_org: Reading... data.google_site_verification_token.cmueats_com: Reading... data.google_site_verification_token.andrew-inbox_com: Reading... data.google_site_verification_token.cmucal_com: Read complete after 0s [id=cmucal.com] data.google_site_verification_token.cmu_dev: Read complete after 1s [id=cmu.dev] data.google_site_verification_token.doggylabs_org: Reading... data.google_site_verification_token.scottylabs_org: Reading... data.google_site_verification_token.tartan_vote: Read complete after 0s [id=tartan.vote] data.google_site_verification_token.cmubulletin_com: Read complete after 0s [id=cmubulletin.com] data.google_site_verification_token.cmu_guide: Read complete after 0s [id=cmu.guide] data.google_site_verification_token.terrier_build: Reading... data.google_site_verification_token.rent-pgh_com: Reading... data.google_site_verification_token.cmu_lol: Reading... data.google_site_verification_token.cmucourses_com: Read complete after 0s [id=cmucourses.com] data.google_site_verification_token.cmu_do: Reading... data.google_site_verification_token.cmuhousing_com: Read complete after 0s [id=cmuhousing.com] data.google_site_verification_token.cmueats_com: Read complete after 0s [id=cmueats.com] data.google_site_verification_token.collegecart_org: Reading... data.keycloak_realm.scottylabs: Reading... data.google_site_verification_token.tartanhacks_org: Read complete after 0s [id=tartanhacks.org] data.google_site_verification_token.andrew-inbox_com: Read complete after 0s [id=andrew-inbox.com] data.google_site_verification_token.doggylabs_org: Read complete after 0s [id=doggylabs.org] data.google_site_verification_token.scottylabs_org: Read complete after 0s [id=scottylabs.org] data.google_site_verification_token.rent-pgh_com: Read complete after 0s [id=rent-pgh.com] data.google_site_verification_token.terrier_build: Read complete after 0s [id=terrier.build] data.google_site_verification_token.cmu_lol: Read complete after 0s [id=cmu.lol] data.google_site_verification_token.cmu_do: Read complete after 0s [id=cmu.do] data.google_site_verification_token.collegecart_org: Read complete after 0s [id=collegecart.org] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] cloudflare_dns_record.this["scotty.lol-search-console"]: Refreshing state... [id=cba5f67947530d8a1386fb7e4a606237] cloudflare_dns_record.this["cmueats.com-search-console"]: Refreshing state... [id=04432bb482471ce2c2852d36090ab199] cloudflare_dns_record.this["cmu.dev-search-console"]: Refreshing state... [id=a22c11c13e8bc14f8391ea00cc0a2acc] cloudflare_dns_record.this["cmu.do-search-console"]: Refreshing state... [id=fad736d884eb893aea9670c528958790] cloudflare_dns_record.this["scottylabs.org-search-console"]: Refreshing state... [id=afe998ea60845634af5eaaa02dd4704a] cloudflare_dns_record.this["cmustudy.com-search-console"]: Refreshing state... [id=fc5f9b866364a4dfdff4b03351327116] cloudflare_dns_record.this["scottylabs.net-search-console"]: Refreshing state... [id=0bb7922bb08af956a750bfbb6b1d0a43] cloudflare_dns_record.this["cmugpt.com-search-console"]: Refreshing state... [id=cb856bb5376d669aefd3bafe911b69fb] cloudflare_dns_record.this["rent-pgh.com-search-console"]: Refreshing state... [id=95b1ac39812457a57127d9074b166c14] cloudflare_dns_record.this["doggylabs.org-search-console"]: Refreshing state... [id=d7898645fdfbd05ce0ca9473e57bda4f] cloudflare_dns_record.this["cmucal.com-search-console"]: Refreshing state... [id=069646d798555f20775a10f8d3593234] cloudflare_dns_record.this["cmu.lol-search-console"]: Refreshing state... [id=7254f9648874e0f65f74b5e60571a6b4] cloudflare_dns_record.this["andrew-inbox.com-search-console"]: Refreshing state... [id=6734312208e0406bc73c77c8c3ac9dfb] cloudflare_dns_record.this["terrier.build-search-console"]: Refreshing state... [id=0e5bed4022996e6bd162792fec3f37f3] cloudflare_dns_record.this["scottylabs.dev-search-console"]: Refreshing state... [id=864f25d2422df08b9c86ecc944fe8fc0] cloudflare_dns_record.this["cmu.guide-search-console"]: Refreshing state... [id=66e17aaca6761b9163be4bd1f5fbf6bb] cloudflare_dns_record.this["cmuservice.shop-search-console"]: Refreshing state... [id=c79945c8f4974682fb38d45dc289e493] cloudflare_dns_record.this["cmu.quest-search-console"]: Refreshing state... [id=f9fec9b575c83acbab3b0af5dc76523c] cloudflare_dns_record.this["collegecart.org-search-console"]: Refreshing state... [id=20511a9991cb1a4f56806982ea13e3d4] cloudflare_dns_record.this["tartan.vote-search-console"]: Refreshing state... [id=cf58032f4dbd3111d60cb1b0216b4c0d] cloudflare_dns_record.this["cmucourses.com-search-console"]: Refreshing state... [id=ba941c528e666894af829920d1beb90b] cloudflare_dns_record.this["cmu.homes-search-console"]: Refreshing state... [id=e83789c146bcc6bbe07ef3cf55d3a978] cloudflare_dns_record.this["cmubulletin.com-search-console"]: Refreshing state... [id=da521a014f7a08e306f07ba5c20d3ae4] cloudflare_dns_record.this["occ.build-search-console"]: Refreshing state... [id=fa869e3a71d6b4c172e3940ce642766f] cloudflare_dns_record.this["roomies.live-search-console"]: Refreshing state... [id=e46a5c3a36953cc65f1d2f7b6c3ff169] cloudflare_dns_record.this["tartanhacks.com-search-console"]: Refreshing state... [id=093a2016c43e55f3757f7a68c33b4a57] cloudflare_dns_record.this["cmuhousing.com-search-console"]: Refreshing state... [id=3723f3c3d58a68f29d506cf44272c4fe] cloudflare_dns_record.this["cmumaps.com-search-console"]: Refreshing state... [id=53f56e3ab57a1d5b8299ec543ec4b666] cloudflare_dns_record.this["tartanhacks.org-search-console"]: Refreshing state... [id=9936d3f55b67b5df603204b205ff387a] cloudflare_dns_record.this["cmu.courses-search-console"]: Refreshing state... [id=4da145a3e7fcc2ac10ef01c381449c40] cloudflare_dns_record.this["cmuinsta.com-search-console"]: Refreshing state... [id=c9296c84e333ba72c2ae69ecb93c6857] google_site_verification_web_resource.terrier_build: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build] google_site_verification_web_resource.scottylabs_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev] google_site_verification_web_resource.cmu_courses: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses] google_site_verification_web_resource.occ_build: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build] google_site_verification_web_resource.roomies_live: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live] google_site_verification_web_resource.cmu_guide: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide] google_site_verification_web_resource.scotty_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol] google_site_verification_web_resource.andrew-inbox_com: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com] google_site_verification_web_resource.cmu_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol] google_site_verification_web_resource.rent-pgh_com: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com] google_site_verification_web_resource.cmubulletin_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com] google_site_verification_web_resource.collegecart_org: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org] google_site_verification_web_resource.cmugpt_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com] google_site_verification_web_resource.cmumaps_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com] google_site_verification_web_resource.tartanhacks_org: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org] google_site_verification_web_resource.tartan_vote: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote] google_site_verification_web_resource.cmustudy_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com] google_site_verification_web_resource.doggylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org] google_site_verification_web_resource.cmu_quest: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest] google_site_verification_web_resource.cmuinsta_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com] google_site_verification_web_resource.cmuservice_shop: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop] google_site_verification_web_resource.scottylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org] google_site_verification_web_resource.scottylabs_net: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net] google_site_verification_web_resource.cmu_homes: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes] google_site_verification_web_resource.cmuhousing_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com] google_site_verification_web_resource.cmucal_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com] google_site_verification_web_resource.cmu_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev] google_site_verification_web_resource.tartanhacks_com: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com] google_site_verification_web_resource.cmucourses_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com] google_site_verification_web_resource.cmu_do: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do] google_site_verification_web_resource.cmueats_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com] google_site_verification_owner.terrier_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/ops@scottylabs.org] google_site_verification_owner.terrier_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/admin@scottylabs.org] google_site_verification_owner.rent-pgh_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/ops@scottylabs.org] google_site_verification_owner.rent-pgh_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/admin@scottylabs.org] google_site_verification_owner.andrew-inbox_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/admin@scottylabs.org] google_site_verification_owner.andrew-inbox_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/ops@scottylabs.org] google_site_verification_owner.scottylabs_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/ops@scottylabs.org] google_site_verification_owner.scottylabs_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/admin@scottylabs.org] google_site_verification_owner.cmu_courses_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/ops@scottylabs.org] google_site_verification_owner.cmu_courses_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/admin@scottylabs.org] google_site_verification_owner.occ_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/ops@scottylabs.org] google_site_verification_owner.cmubulletin_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/ops@scottylabs.org] google_site_verification_owner.occ_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/admin@scottylabs.org] google_site_verification_owner.cmubulletin_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/admin@scottylabs.org] google_site_verification_owner.scotty_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/ops@scottylabs.org] google_site_verification_owner.scotty_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/admin@scottylabs.org] google_site_verification_owner.collegecart_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/ops@scottylabs.org] google_site_verification_owner.collegecart_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/admin@scottylabs.org] google_site_verification_owner.cmumaps_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/ops@scottylabs.org] google_site_verification_owner.cmumaps_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/admin@scottylabs.org] google_site_verification_owner.cmugpt_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/ops@scottylabs.org] google_site_verification_owner.cmugpt_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/admin@scottylabs.org] google_site_verification_owner.tartan_vote_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/admin@scottylabs.org] google_site_verification_owner.tartan_vote_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/ops@scottylabs.org] google_site_verification_owner.tartanhacks_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/admin@scottylabs.org] google_site_verification_owner.cmu_guide_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/admin@scottylabs.org] google_site_verification_owner.tartanhacks_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/ops@scottylabs.org] google_site_verification_owner.cmu_guide_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/ops@scottylabs.org] google_site_verification_owner.cmu_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/admin@scottylabs.org] google_site_verification_owner.cmu_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/ops@scottylabs.org] google_site_verification_owner.roomies_live_ops: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/ops@scottylabs.org] google_site_verification_owner.cmuinsta_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/ops@scottylabs.org] google_site_verification_owner.roomies_live_admin: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/admin@scottylabs.org] google_site_verification_owner.cmuinsta_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/admin@scottylabs.org] google_site_verification_owner.cmustudy_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/ops@scottylabs.org] google_site_verification_owner.cmu_quest_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/admin@scottylabs.org] google_site_verification_owner.cmustudy_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/admin@scottylabs.org] google_site_verification_owner.cmu_quest_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/ops@scottylabs.org] google_site_verification_owner.doggylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/admin@scottylabs.org] google_site_verification_owner.doggylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/ops@scottylabs.org] google_site_verification_owner.scottylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/ops@scottylabs.org] google_site_verification_owner.scottylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/admin@scottylabs.org] google_site_verification_owner.cmuservice_shop_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/admin@scottylabs.org] google_site_verification_owner.cmuservice_shop_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/ops@scottylabs.org] google_site_verification_owner.cmu_homes_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/admin@scottylabs.org] google_site_verification_owner.cmu_homes_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/ops@scottylabs.org] google_site_verification_owner.cmuhousing_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/ops@scottylabs.org] google_site_verification_owner.cmuhousing_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/admin@scottylabs.org] google_site_verification_owner.cmucal_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/admin@scottylabs.org] google_site_verification_owner.cmucal_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/ops@scottylabs.org] google_site_verification_owner.scottylabs_net_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/admin@scottylabs.org] google_site_verification_owner.scottylabs_net_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/ops@scottylabs.org] google_site_verification_owner.cmu_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/admin@scottylabs.org] google_site_verification_owner.cmu_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/ops@scottylabs.org] google_site_verification_owner.cmu_do_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/ops@scottylabs.org] google_site_verification_owner.cmu_do_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/admin@scottylabs.org] google_site_verification_owner.cmucourses_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/ops@scottylabs.org] google_site_verification_owner.cmucourses_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/admin@scottylabs.org] google_site_verification_owner.cmueats_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/ops@scottylabs.org] google_site_verification_owner.cmueats_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/admin@scottylabs.org] google_site_verification_owner.tartanhacks_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/ops@scottylabs.org] google_site_verification_owner.tartanhacks_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/admin@scottylabs.org] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p search-console ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fsearch-console%252Fsearch-console) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p search-console ``` No changes. Your infrastructure matches the configuration. --- ### Plan Summary 22 projects, 1 with changes, 21 with no changes, 0 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```

anish commented

2026-10-26 07:57:28 +00:00

Author

Owner

atlantis apply

scottylabs-bot commented

2026-10-26 07:57:40 +00:00

Owner

Ran Apply for 22 projects:

project: occ dir: . workspace: occ
project: litellm dir: . workspace: litellm
project: atlantis dir: . workspace: atlantis
project: matrix dir: . workspace: matrix
project: forgejo dir: . workspace: forgejo
project: nixbot dir: . workspace: nixbot
project: kennel dir: . workspace: kennel
project: hosts dir: . workspace: hosts
project: cloudflare-tokens dir: . workspace: cloudflare-tokens
project: mail dir: . workspace: mail
project: headscale dir: . workspace: headscale
project: garage-webadmin dir: . workspace: garage-webadmin
project: governance dir: . workspace: governance
project: observability dir: . workspace: observability
project: keycloak dir: . workspace: keycloak
project: openbao dir: . workspace: openbao
project: webhook dir: . workspace: webhook
project: posthog dir: . workspace: posthog
project: snot dir: . workspace: snot
project: vaultwarden dir: . workspace: vaultwarden
project: ricochet dir: . workspace: ricochet
project: search-console dir: . workspace: search-console

1. project: `occ` dir: `.` workspace: `occ`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

2. project: `litellm` dir: `.` workspace: `litellm`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

3. project: `atlantis` dir: `.` workspace: `atlantis`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

4. project: `matrix` dir: `.` workspace: `matrix`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

5. project: `forgejo` dir: `.` workspace: `forgejo`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

6. project: `nixbot` dir: `.` workspace: `nixbot`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

7. project: `kennel` dir: `.` workspace: `kennel`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

kennel_approle_role_id = "6d684d7c-a739-cad2-58c2-9fb7d9bc48fc"

8. project: `hosts` dir: `.` workspace: `hosts`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

9. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

10. project: `mail` dir: `.` workspace: `mail`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

11. project: `headscale` dir: `.` workspace: `headscale`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

headplane_client_secret = <sensitive>
headscale_client_secret = <sensitive>

12. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

garage_webadmin_client_secret = <sensitive>

13. project: `governance` dir: `.` workspace: `governance`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

governance_approle_role_id = "985fa7b6-334c-4e8c-5780-46dc57798bbf"

14. project: `observability` dir: `.` workspace: `observability`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

15. project: `keycloak` dir: `.` workspace: `keycloak`

Apply Error

Show Output

running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/183/keycloak': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/183/keycloak": 
╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
keycloak_openid_client.terranix: Creating...
keycloak_openid_client.keycloak_master: Creating...
keycloak_openid_client.keycloak_master: Creation complete after 1s [id=6fc98345-43f6-4958-9641-021899c93dad]
keycloak_oidc_identity_provider.master_scottylabs: Creating...
keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups: Creating...
keycloak_openid_client.terranix: Creation complete after 1s [id=491efdcd-735e-4e56-9381-75dd817d87c4]
vault_kv_secret_v2.keycloak_terranix: Creating...
keycloak_openid_client_service_account_realm_role.terranix_admin: Creating...
vault_kv_secret_v2.keycloak_terranix: Creation complete after 0s [id=secret/data/infra/keycloak-terranix]
keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups: Creation complete after 0s [id=70e06f16-65e8-4487-b02b-afa3cc9af0ea]
keycloak_oidc_identity_provider.master_scottylabs: Creation complete after 0s [id=scottylabs]
keycloak_custom_identity_provider_mapper.master_devops_admin: Creating...
keycloak_openid_client_service_account_realm_role.terranix_admin: Creation complete after 0s [id=fbb7e0fc-e8a2-4540-86b1-9608d19a0724/b8fc6ad5-7b83-4d86-9227-620c8e50e720]
╷
│ Error: error sending POST request to /admin/realms/master/identity-provider/instances/scottylabs/mappers: 403 Forbidden. Response body: {"errorMessage":"This identity provider is not configured to allow granting admin roles via mappers. A realm administrator must enable the 'allowAdminRoleMapping' setting on this identity provider."}
│ 
│   with keycloak_custom_identity_provider_mapper.master_devops_admin,
│   on config.tf.json line 214, in resource.keycloak_custom_identity_provider_mapper.master_devops_admin:
│  214:       },
│ 
╵

16. project: `openbao` dir: `.` workspace: `openbao`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

approle_role_ids = {
  "deploy-01" = "d63a47b8-ceb2-d59e-e8f0-659023851ae8"
  "infra-01" = "2df30359-cc03-22a6-8ebe-3eb36dfc0194"
  "infra-03" = "89a95389-6f6c-b634-c9b2-9a148028b126"
  "signage-01" = "328a7073-0315-f7f4-5433-8d48f6092e22"
  "snoopy" = "210a166d-85f9-d8f4-3e81-9d0f994c5043"
}
atlantis_entity_id = "dacc3864-d73d-d2ed-17a4-b679f82f8b00"

17. project: `webhook` dir: `.` workspace: `webhook`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

18. project: `posthog` dir: `.` workspace: `posthog`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

19. project: `snot` dir: `.` workspace: `snot`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

20. project: `vaultwarden` dir: `.` workspace: `vaultwarden`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

21. project: `ricochet` dir: `.` workspace: `ricochet`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

22. project: `search-console` dir: `.` workspace: `search-console`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Apply Summary

22 projects, 21 successful, 0 failed, 1 errored

Ran Apply for 22 projects: 1. project: `occ` dir: `.` workspace: `occ` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `nixbot` dir: `.` workspace: `nixbot` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` 1. project: `mail` dir: `.` workspace: `mail` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `search-console` dir: `.` workspace: `search-console` --- ### 1. project: `occ` dir: `.` workspace: `occ` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 2. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 3. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 4. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 5. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 6. project: `nixbot` dir: `.` workspace: `nixbot` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 7. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: kennel_approle_role_id = "6d684d7c-a739-cad2-58c2-9fb7d9bc48fc" ``` </details> --- ### 8. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 9. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 10. project: `mail` dir: `.` workspace: `mail` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 11. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: headplane_client_secret = <sensitive> headscale_client_secret = <sensitive> ``` </details> --- ### 12. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: garage_webadmin_client_secret = <sensitive> ``` </details> --- ### 13. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: governance_approle_role_id = "985fa7b6-334c-4e8c-5780-46dc57798bbf" ``` </details> --- ### 14. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 15. project: `keycloak` dir: `.` workspace: `keycloak` **Apply Error** <details><summary>Show Output</summary> ``` running 'sh -c' 'tofu apply -input=false "$PLANFILE"' in '/var/lib/atlantis/repos/ScottyLabs/infrastructure/183/keycloak': exit status 1: running "tofu apply -input=false \"$PLANFILE\"" in "/var/lib/atlantis/repos/ScottyLabs/infrastructure/183/keycloak": ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ keycloak_openid_client.terranix: Creating... keycloak_openid_client.keycloak_master: Creating... keycloak_openid_client.keycloak_master: Creation complete after 1s [id=6fc98345-43f6-4958-9641-021899c93dad] keycloak_oidc_identity_provider.master_scottylabs: Creating... keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups: Creating... keycloak_openid_client.terranix: Creation complete after 1s [id=491efdcd-735e-4e56-9381-75dd817d87c4] vault_kv_secret_v2.keycloak_terranix: Creating... keycloak_openid_client_service_account_realm_role.terranix_admin: Creating... vault_kv_secret_v2.keycloak_terranix: Creation complete after 0s [id=secret/data/infra/keycloak-terranix] keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups: Creation complete after 0s [id=70e06f16-65e8-4487-b02b-afa3cc9af0ea] keycloak_oidc_identity_provider.master_scottylabs: Creation complete after 0s [id=scottylabs] keycloak_custom_identity_provider_mapper.master_devops_admin: Creating... keycloak_openid_client_service_account_realm_role.terranix_admin: Creation complete after 0s [id=fbb7e0fc-e8a2-4540-86b1-9608d19a0724/b8fc6ad5-7b83-4d86-9227-620c8e50e720] ╷ │ Error: error sending POST request to /admin/realms/master/identity-provider/instances/scottylabs/mappers: 403 Forbidden. Response body: {"errorMessage":"This identity provider is not configured to allow granting admin roles via mappers. A realm administrator must enable the 'allowAdminRoleMapping' setting on this identity provider."} │ │ with keycloak_custom_identity_provider_mapper.master_devops_admin, │ on config.tf.json line 214, in resource.keycloak_custom_identity_provider_mapper.master_devops_admin: │ 214: }, │ ╵ ``` </details> --- ### 16. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: approle_role_ids = { "deploy-01" = "d63a47b8-ceb2-d59e-e8f0-659023851ae8" "infra-01" = "2df30359-cc03-22a6-8ebe-3eb36dfc0194" "infra-03" = "89a95389-6f6c-b634-c9b2-9a148028b126" "signage-01" = "328a7073-0315-f7f4-5433-8d48f6092e22" "snoopy" = "210a166d-85f9-d8f4-3e81-9d0f994c5043" } atlantis_entity_id = "dacc3864-d73d-d2ed-17a4-b679f82f8b00" ``` </details> --- ### 17. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 18. project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 19. project: `snot` dir: `.` workspace: `snot` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 20. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 21. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 22. project: `search-console` dir: `.` workspace: `search-console` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### Apply Summary 22 projects, 21 successful, 0 failed, 1 errored

anish added 1 commit

2026-10-26 07:58:47 +00:00

fix: allow admin role mapping on the scottylabs idp

atlantis/pre_workflow_hook: Generate atlantis.yaml from the flake succeeded.

Details

atlantis/plan: kennel Plan failed.

Details

atlantis/plan: hosts Plan failed.

Details

atlantis/plan: forgejo Plan failed.

Details

atlantis/plan: litellm Plan failed.

Details

atlantis/plan: keycloak Plan failed.

Details

atlantis/plan: matrix Plan failed.

Details

atlantis/plan: cloudflare-tokens Plan failed.

Details

atlantis/plan: headscale Plan failed.

Details

atlantis/plan: mail Plan failed.

Details

atlantis/plan: governance Plan failed.

Details

atlantis/plan: occ Plan failed.

Details

atlantis/plan: atlantis Plan failed.

Details

atlantis/plan: observability Plan failed.

Details

atlantis/plan: nixbot Plan failed.

Details

atlantis/plan: garage-webadmin Plan failed.

Details

atlantis/plan: openbao Plan failed.

Details

atlantis/plan: search-console Plan failed.

Details

atlantis/plan: snot Plan failed.

Details

atlantis/plan: vaultwarden Plan failed.

Details

atlantis/plan: posthog Plan failed.

Details

atlantis/plan: ricochet Plan failed.

Details

atlantis/plan: webhook Plan failed.

Details

atlantis/plan 22/22 projects failed to plan.

nixbot/nix-eval evaluation succeeded in 0s (1 warning)

Details

nixbot/nix-build 0 attributes built

Details

CI / check (pull_request) Has been cancelled

Details

CI / build (pull_request) Has been cancelled

Details

CI / check-1 (pull_request) Has been cancelled

Details

kennel/build build succeeded

Details

62fe9eac24

Signed-off-by: Anish Pallati <i@anish.land>

scottylabs-bot commented

2026-10-26 07:58:49 +00:00

Owner

Ran Plan for 22 projects:

project: kennel dir: . workspace: kennel
project: hosts dir: . workspace: hosts
project: forgejo dir: . workspace: forgejo
project: litellm dir: . workspace: litellm
project: keycloak dir: . workspace: keycloak
project: matrix dir: . workspace: matrix
project: cloudflare-tokens dir: . workspace: cloudflare-tokens
project: mail dir: . workspace: mail
project: headscale dir: . workspace: headscale
project: governance dir: . workspace: governance
project: occ dir: . workspace: occ
project: atlantis dir: . workspace: atlantis
project: observability dir: . workspace: observability
project: nixbot dir: . workspace: nixbot
project: openbao dir: . workspace: openbao
project: garage-webadmin dir: . workspace: garage-webadmin
project: search-console dir: . workspace: search-console
project: vaultwarden dir: . workspace: vaultwarden
project: snot dir: . workspace: snot
project: posthog dir: . workspace: posthog
project: ricochet dir: . workspace: ricochet
project: webhook dir: . workspace: webhook

1. project: `kennel` dir: `.` workspace: `kennel`

Plan Failed: Pull request must be mergeable before running plan.

2. project: `hosts` dir: `.` workspace: `hosts`

Plan Failed: Pull request must be mergeable before running plan.

3. project: `forgejo` dir: `.` workspace: `forgejo`

Plan Failed: Pull request must be mergeable before running plan.

4. project: `litellm` dir: `.` workspace: `litellm`

Plan Failed: Pull request must be mergeable before running plan.

5. project: `keycloak` dir: `.` workspace: `keycloak`

Plan Failed: Pull request must be mergeable before running plan.

6. project: `matrix` dir: `.` workspace: `matrix`

Plan Failed: Pull request must be mergeable before running plan.

7. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens`

Plan Failed: Pull request must be mergeable before running plan.

8. project: `mail` dir: `.` workspace: `mail`

Plan Failed: Pull request must be mergeable before running plan.

9. project: `headscale` dir: `.` workspace: `headscale`

Plan Failed: Pull request must be mergeable before running plan.

10. project: `governance` dir: `.` workspace: `governance`

Plan Failed: Pull request must be mergeable before running plan.

11. project: `occ` dir: `.` workspace: `occ`

Plan Failed: Pull request must be mergeable before running plan.

12. project: `atlantis` dir: `.` workspace: `atlantis`

Plan Failed: Pull request must be mergeable before running plan.

13. project: `observability` dir: `.` workspace: `observability`

Plan Failed: Pull request must be mergeable before running plan.

14. project: `nixbot` dir: `.` workspace: `nixbot`

Plan Failed: Pull request must be mergeable before running plan.

15. project: `openbao` dir: `.` workspace: `openbao`

Plan Failed: Pull request must be mergeable before running plan.

16. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin`

Plan Failed: Pull request must be mergeable before running plan.

17. project: `search-console` dir: `.` workspace: `search-console`

Plan Failed: Pull request must be mergeable before running plan.

18. project: `vaultwarden` dir: `.` workspace: `vaultwarden`

Plan Failed: Pull request must be mergeable before running plan.

19. project: `snot` dir: `.` workspace: `snot`

Plan Failed: Pull request must be mergeable before running plan.

20. project: `posthog` dir: `.` workspace: `posthog`

Plan Failed: Pull request must be mergeable before running plan.

21. project: `ricochet` dir: `.` workspace: `ricochet`

Plan Failed: Pull request must be mergeable before running plan.

22. project: `webhook` dir: `.` workspace: `webhook`

Plan Failed: Pull request must be mergeable before running plan.

Plan Summary

22 projects, 0 with changes, 0 with no changes, 22 failed

⏩ To apply all unapplied plans from this Pull Request, comment:
```
atlantis apply
```
🚮 To delete all plans and locks from this Pull Request, comment:
```
atlantis unlock
```

Ran Plan for 22 projects: 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` 1. project: `mail` dir: `.` workspace: `mail` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `occ` dir: `.` workspace: `occ` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `nixbot` dir: `.` workspace: `nixbot` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `search-console` dir: `.` workspace: `search-console` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `webhook` dir: `.` workspace: `webhook` --- ### 1. project: `kennel` dir: `.` workspace: `kennel` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 2. project: `hosts` dir: `.` workspace: `hosts` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 3. project: `forgejo` dir: `.` workspace: `forgejo` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 4. project: `litellm` dir: `.` workspace: `litellm` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 5. project: `keycloak` dir: `.` workspace: `keycloak` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 6. project: `matrix` dir: `.` workspace: `matrix` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 7. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 8. project: `mail` dir: `.` workspace: `mail` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 9. project: `headscale` dir: `.` workspace: `headscale` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 10. project: `governance` dir: `.` workspace: `governance` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 11. project: `occ` dir: `.` workspace: `occ` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 12. project: `atlantis` dir: `.` workspace: `atlantis` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 13. project: `observability` dir: `.` workspace: `observability` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 14. project: `nixbot` dir: `.` workspace: `nixbot` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 15. project: `openbao` dir: `.` workspace: `openbao` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 16. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 17. project: `search-console` dir: `.` workspace: `search-console` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 18. project: `vaultwarden` dir: `.` workspace: `vaultwarden` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 19. project: `snot` dir: `.` workspace: `snot` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 20. project: `posthog` dir: `.` workspace: `posthog` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 21. project: `ricochet` dir: `.` workspace: `ricochet` **Plan Failed**: Pull request must be mergeable before running plan. --- ### 22. project: `webhook` dir: `.` workspace: `webhook` **Plan Failed**: Pull request must be mergeable before running plan. --- ### Plan Summary 22 projects, 0 with changes, 0 with no changes, 22 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```

anish force-pushed keycloak-admin-access from 62fe9eac24

atlantis/pre_workflow_hook: Generate atlantis.yaml from the flake succeeded.

Details

atlantis/plan: kennel Plan failed.

Details

atlantis/plan: hosts Plan failed.

Details

atlantis/plan: forgejo Plan failed.

Details

atlantis/plan: litellm Plan failed.

Details

atlantis/plan: keycloak Plan failed.

Details

atlantis/plan: matrix Plan failed.

Details

atlantis/plan: cloudflare-tokens Plan failed.

Details

atlantis/plan: headscale Plan failed.

Details

atlantis/plan: mail Plan failed.

Details

atlantis/plan: governance Plan failed.

Details

atlantis/plan: occ Plan failed.

Details

atlantis/plan: atlantis Plan failed.

Details

atlantis/plan: observability Plan failed.

Details

atlantis/plan: nixbot Plan failed.

Details

atlantis/plan: garage-webadmin Plan failed.

Details

atlantis/plan: openbao Plan failed.

Details

atlantis/plan: search-console Plan failed.

Details

atlantis/plan: snot Plan failed.

Details

atlantis/plan: vaultwarden Plan failed.

Details

atlantis/plan: posthog Plan failed.

Details

atlantis/plan: ricochet Plan failed.

Details

atlantis/plan: webhook Plan failed.

Details

atlantis/plan 22/22 projects failed to plan.

nixbot/nix-eval evaluation succeeded in 0s (1 warning)

Details

nixbot/nix-build 0 attributes built

Details

CI / check (pull_request) Has been cancelled

Details

CI / build (pull_request) Has been cancelled

Details

CI / check-1 (pull_request) Has been cancelled

Details

kennel/build build succeeded

Details

to 44c973b1cf

atlantis/apply 22/22 projects applied successfully.

atlantis/apply: governance Apply succeeded.

Details

atlantis/apply: observability Apply succeeded.

Details

atlantis/apply: nixbot Apply succeeded.

Details

atlantis/apply: forgejo Apply succeeded.

Details

atlantis/apply: kennel Apply succeeded.

Details

atlantis/apply: headscale Apply succeeded.

Details

atlantis/apply: litellm Apply succeeded.

Details

atlantis/apply: cloudflare-tokens Apply succeeded.

Details

atlantis/apply: hosts Apply succeeded.

Details

atlantis/apply: atlantis Apply succeeded.

Details

atlantis/apply: mail Apply succeeded.

Details

atlantis/apply: occ Apply succeeded.

Details

atlantis/apply: keycloak Apply succeeded.

Details

atlantis/apply: ricochet Apply succeeded.

Details

atlantis/apply: posthog Apply succeeded.

Details

atlantis/apply: openbao Apply succeeded.

Details

atlantis/apply: vaultwarden Apply succeeded.

Details

atlantis/apply: webhook Apply succeeded.

Details

atlantis/apply: snot Apply succeeded.

Details

atlantis/apply: search-console Apply succeeded.

Details

nixbot/nix-eval evaluation succeeded

Details

nixbot/nix-build 0 attributes built

Details

CI / build (pull_request) Failing after 1m12s

Details

CI / check (pull_request) Failing after 0s

Details

kennel/build build succeeded

Details

kennel/deploy deployment healthy

CI / check-1 (push) Failing after 55s

Details

CI / build (push) Failing after 1m12s

Details

CI / check (push) Failing after 0s

Details

2026-10-26 07:58:54 +00:00

Compare

scottylabs-bot commented

2026-10-26 07:59:27 +00:00

Owner

Ran Plan for 22 projects:

project: occ dir: . workspace: occ
project: governance dir: . workspace: governance
project: mail dir: . workspace: mail
project: litellm dir: . workspace: litellm
project: forgejo dir: . workspace: forgejo
project: kennel dir: . workspace: kennel
project: cloudflare-tokens dir: . workspace: cloudflare-tokens
project: headscale dir: . workspace: headscale
project: matrix dir: . workspace: matrix
project: garage-webadmin dir: . workspace: garage-webadmin
project: atlantis dir: . workspace: atlantis
project: nixbot dir: . workspace: nixbot
project: observability dir: . workspace: observability
project: hosts dir: . workspace: hosts
project: keycloak dir: . workspace: keycloak
project: openbao dir: . workspace: openbao
project: posthog dir: . workspace: posthog
project: snot dir: . workspace: snot
project: webhook dir: . workspace: webhook
project: ricochet dir: . workspace: ricochet
project: vaultwarden dir: . workspace: vaultwarden
project: search-console dir: . workspace: search-console

1. project: `occ` dir: `.` workspace: `occ`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
cloudflare_dns_record.this["incus"]: Refreshing state... [id=68d4d1524c79e8faf2eb4b01f8eeda5c]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p occ
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p occ
```

No changes. Your infrastructure matches the configuration.

2. project: `governance` dir: `.` workspace: `governance`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN]
vault_policy.governance: Refreshing state... [id=governance]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s
vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.keycloak_openid_client.realm_management: Reading...
keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe]
data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278]
vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484]
keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865]
keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a]
vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID]
keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966]

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p governance
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p governance
```

No changes. Your infrastructure matches the configuration.

3. project: `mail` dir: `.` workspace: `mail`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
cloudflare_email_sending_subdomain.scottylabs-org: Refreshing state... [id=d861e202e90146f49239f7f638bdb871]
cloudflare_dns_record.this["scottylabs-dev-spf"]: Refreshing state... [id=e78ffa0bc6095aafd2067c900f929b50]
cloudflare_dns_record.this["scottylabs-org-spf"]: Refreshing state... [id=6075ba34182127d6149528376bda1a6a]
cloudflare_dns_record.this["scottylabs-org-dkim"]: Refreshing state... [id=0c3e8525e281a85dcd4f127e7babb35d]
cloudflare_dns_record.this["scottylabs-dev-mx"]: Refreshing state... [id=b4e4301c200d52f66335bb93c7f3b9dd]
cloudflare_email_sending_subdomain.cmu-dev: Refreshing state... [id=fcca671bdc8e46e4ad9efb669e3a190c]
cloudflare_dns_record.this["scottylabs-org-mx"]: Refreshing state... [id=01791245a3e69e14b1a4b8f3801b0677]
cloudflare_dns_record.this["scottylabs-dev-dkim"]: Refreshing state... [id=8f81d427fc9a20433b2b768a2820753a]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p mail
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p mail
```

No changes. Your infrastructure matches the configuration.

4. project: `litellm` dir: `.` workspace: `litellm`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
random_password.litellm_master_key: Refreshing state... [id=none]
random_password.cli_proxy_api_key: Refreshing state... [id=none]
random_password.litellm_salt_key: Refreshing state... [id=none]
vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key]
vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key]
vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509]
vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc]
keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f]
cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p litellm
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p litellm
```

No changes. Your infrastructure matches the configuration.

5. project: `forgejo` dir: `.` workspace: `forgejo`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960]
garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725]
vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage]
garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6]
cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68]
keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198]
vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p forgejo
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p forgejo
```

No changes. Your infrastructure matches the configuration.

6. project: `kennel` dir: `.` workspace: `kennel`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
vault_policy.kennel: Refreshing state... [id=kennel]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel]
cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9]
cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69]
cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p kennel
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p kennel
```

No changes. Your infrastructure matches the configuration.

7. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.cloudflare_api_token_permission_groups_list.all: Reading...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.cloudflare_api_token_permission_groups_list.all: Read complete after 1s
cloudflare_api_token.smtp: Refreshing state... [id=6b334833d9de2b35b22769ba27265f71]
cloudflare_api_token.terranix-dns: Refreshing state... [id=3096f3be78d1baa0ac9e7447414df53b]
cloudflare_api_token.terranix-hosts: Refreshing state... [id=df616c9aae907d8b1442ce79d2f000b2]
cloudflare_api_token.terranix-mail: Refreshing state... [id=88156a4eb6d0856486ce00aed9b99012]
vault_kv_secret_v2.cloudflare_terranix-hosts: Refreshing state... [id=secret/data/infra/cloudflare-terranix-hosts]
vault_kv_secret_v2.cloudflare_smtp: Refreshing state... [id=secret/data/infra/cloudflare-smtp]
vault_kv_secret_v2.cloudflare_terranix-dns: Refreshing state... [id=secret/data/infra/cloudflare-terranix-dns]
vault_kv_secret_v2.cloudflare_terranix-mail: Refreshing state... [id=secret/data/infra/cloudflare-terranix-mail]

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p cloudflare-tokens
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p cloudflare-tokens
```

No changes. Your infrastructure matches the configuration.

8. project: `headscale` dir: `.` workspace: `headscale`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.headplane_cookie: Refreshing state... [id=none]
vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac]
keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8]
keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7]
vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc]
cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20]
cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00]
vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc]
keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p headscale
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p headscale
```

No changes. Your infrastructure matches the configuration.

9. project: `matrix` dir: `.` workspace: `matrix`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada]
cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p matrix
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p matrix
```

No changes. Your infrastructure matches the configuration.

10. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185]
random_password.garage_webadmin_jwt: Refreshing state... [id=none]
vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt]
keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf]
vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc]
cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p garage-webadmin
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p garage-webadmin
```

No changes. Your infrastructure matches the configuration.

11. project: `atlantis` dir: `.` workspace: `atlantis`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of svalabs/forgejo from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed svalabs/forgejo v1.7.0
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
random_password.atlantis_webhook_secret: Refreshing state... [id=none]
vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis]
data.forgejo_repository.governance: Reading...
data.forgejo_repository.infrastructure: Reading...
data.forgejo_repository.governance: Read complete after 0s [name=governance]
data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure]
forgejo_repository_webhook.governance: Refreshing state...
forgejo_repository_webhook.infrastructure: Refreshing state...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs]
cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p atlantis
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p atlantis
```

No changes. Your infrastructure matches the configuration.

12. project: `nixbot` dir: `.` workspace: `nixbot`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of svalabs/forgejo from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed svalabs/forgejo v1.7.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
random_password.nixbot_forgejo: Refreshing state... [id=none]
forgejo_team.nixbot: Refreshing state... [name=nixbot]
forgejo_user.nixbot: Refreshing state...
forgejo_team_member.nixbot: Refreshing state...
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.nixbot: Refreshing state... [id=a45a253b-c5ce-4a75-91cd-c7876354e731]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_kv_secret_v2.nixbot_oidc: Refreshing state... [id=secret/data/infra/nixbot-oidc]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
forgejo_personal_access_token.nixbot: Refreshing state... [name=nixbot]
cloudflare_dns_record.this["nixbot"]: Refreshing state... [id=715d7a325208700119db81c024eaf46f]
vault_kv_secret_v2.nixbot_forgejo: Refreshing state... [id=secret/data/infra/nixbot-forgejo]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p nixbot
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p nixbot
```

No changes. Your infrastructure matches the configuration.

13. project: `observability` dir: `.` workspace: `observability`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
random_password.grafana_secret_key: Refreshing state... [id=none]
vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key]
garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c]
garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c]
garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470]
garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3]
vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3]
garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470]
garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c]
vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c]
cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540]
cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0]
keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e]
vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p observability
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p observability
```

No changes. Your infrastructure matches the configuration.

14. project: `hosts` dir: `.` workspace: `hosts`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55]
cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee]
cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c]
cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d]
cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997]
cloudflare_dns_record.this["infra-03"]: Refreshing state... [id=9172a8cbcb80ce7c1ed2cae96e820659]
cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5bad63854979cad3d5b8b2a9b97aae67"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["388da333f823d55e3d5cfbd686303ed4"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https]
cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p hosts
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p hosts
```

No changes. Your infrastructure matches the configuration.

15. project: `keycloak` dir: `.` workspace: `keycloak`

Show Output

copying 1 paths...
copying path '/nix/store/16l6dkilw8hmj415bjc5lh34xkn2hf3w-config.tf.json.drv' to 'daemon'...
✔  config.tf.json.drv (0s)


Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.master: Reading...
data.keycloak_realm.scottylabs: Reading...
keycloak_realm.scottylabs: Refreshing state... [id=scottylabs]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml]
keycloak_openid_client.keycloak_master: Refreshing state... [id=6fc98345-43f6-4958-9641-021899c93dad]
data.keycloak_realm.master: Read complete after 1s [id=master]
keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs]
ephemeral.vault_kv_secret_v2.keycloak_ldap: Opening...
ephemeral.vault_kv_secret_v2.forgejo_idp: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
data.vault_kv_secret_v2.keycloak_idp: Reading...
data.keycloak_role.master_admin: Reading...
keycloak_openid_client.terranix: Refreshing state... [id=491efdcd-735e-4e56-9381-75dd817d87c4]
data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp]
ephemeral.vault_kv_secret_v2.forgejo_idp: Open complete after 0s
ephemeral.vault_kv_secret_v2.keycloak_ldap: Open complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google]
keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded]
keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack]
keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu]
keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA]
keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev]
data.keycloak_role.master_admin: Read complete after 0s [id=b8fc6ad5-7b83-4d86-9227-620c8e50e720]
keycloak_oidc_identity_provider.apple: Refreshing state... [id=apple]
keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d]
keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7]
keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556]
keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups: Refreshing state... [id=70e06f16-65e8-4487-b02b-afa3cc9af0ea]
keycloak_oidc_identity_provider.master_scottylabs: Refreshing state... [id=scottylabs]
keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac]
keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc]
keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de]
keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0]
keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b]
keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da]
keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651]
keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115]
keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc]
keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784]
keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60]
keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9]
keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1]
keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290]
keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29]
keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505]
keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f]
keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802]
keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6]
keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377]
keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d]
keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f]
keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113]
keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3]
keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7]
keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b]
keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2]
vault_kv_secret_v2.keycloak_terranix: Refreshing state... [id=secret/data/infra/keycloak-terranix]
keycloak_openid_client_service_account_realm_role.terranix_admin: Refreshing state... [id=fbb7e0fc-e8a2-4540-86b1-9608d19a0724/b8fc6ad5-7b83-4d86-9227-620c8e50e720]
keycloak_custom_identity_provider_mapper.apple_email: Refreshing state... [id=68841e9f-a367-4c71-ac26-668ac8e559ad]
keycloak_custom_identity_provider_mapper.apple_id: Refreshing state... [id=81993bf9-93bf-40fd-9b59-0909abb570f2]
ephemeral.vault_kv_secret_v2.keycloak_ldap: Closing...
ephemeral.vault_kv_secret_v2.keycloak_ldap: Close complete after 0s
cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc]
ephemeral.vault_kv_secret_v2.forgejo_idp: Closing...
ephemeral.vault_kv_secret_v2.forgejo_idp: Close complete after 0s
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  ~ update in-place (current -> planned)

OpenTofu will perform the following actions:

  # keycloak_custom_identity_provider_mapper.master_devops_admin will be created
+   resource "keycloak_custom_identity_provider_mapper" "master_devops_admin" {
+       extra_config             = {
          + "are.claim.values.regex" = "false"
          + "claims"                 = jsonencode(
                [
                  + {
+                       key   = "groups"
+                       value = "/projects/devops/admins"
                    },
                ]
            )
          + "role"                   = "admin"
          + "syncMode"               = "FORCE"
        }
+       id                       = (known after apply)
+       identity_provider_alias  = "scottylabs"
+       identity_provider_mapper = "oidc-advanced-role-idp-mapper"
+       name                     = "devops-admin"
+       realm                    = "master"
    }

  # keycloak_oidc_identity_provider.master_scottylabs will be updated in-place
!   resource "keycloak_oidc_identity_provider" "master_scottylabs" {
!       client_secret_wo                        = (write-only attribute)
!       extra_config                            = {
          + "allowAdminRoleMapping" = "true"
            # (1 unchanged element hidden)
        }
        id                                      = "scottylabs"
        # (29 unchanged attributes hidden)
    }

Plan: 1 to add, 1 to change, 0 to destroy.
╷
│ Warning: Deprecated Resource
│ 
│   with data.vault_kv_secret_v2.keycloak_idp,
│   on config.tf.json line 21, in data.vault_kv_secret_v2.keycloak_idp:
│   21:       }
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
│ 
│ (and one more similar warning elsewhere)
╵
╷
│ Warning: Value derived from a deprecated source
│ 
│   with keycloak_oidc_google_identity_provider.google,
│   on config.tf.json line 485, in resource.keycloak_oidc_google_identity_provider.google:
│  485:       }
│ 
│ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is
│ deprecated with the following message:
│ 
│ Deprecated. Please use new Ephemeral KVV2 Secret resource
│ `vault_kv_secret_v2` instead
╵

─────────────────────────────────────────────────────────────────────────────

Saved the plan to:
/var/lib/atlantis/repos/ScottyLabs/infrastructure/183/keycloak/keycloak-keycloak.tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/183/keycloak/keycloak-keycloak.tfplan"

▶️ To apply this plan, comment:
```
atlantis apply -p keycloak
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p keycloak
```

Plan: 1 to add, 1 to change, 0 to destroy.

16. project: `openbao` dir: `.` workspace: `openbao`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
vault_identity_oidc_key.terranix: Refreshing state... [id=terranix]
vault_policy.shared_read: Refreshing state... [id=shared-read]
vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt]
vault_identity_oidc.server: Refreshing state... [id=http://127.0.0.1:8200]
vault_policy.infra: Refreshing state... [id=infra]
vault_auth_backend.approle: Refreshing state... [id=approle]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
vault_policy.devops: Refreshing state... [id=devops]
data.vault_auth_backend.token: Reading...
data.vault_auth_backend.token: Read complete after 0s [id=token]
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
vault_policy.ci: Refreshing state... [id=ci]
vault_policy.terranix_search_console: Refreshing state... [id=terranix-search-console]
vault_mount.kv: Refreshing state... [id=secret]
vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01]
vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy]
vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01]
vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f]
vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff]
vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01]
vault_approle_auth_backend_role.host["infra-03"]: Refreshing state... [id=auth/approle/role/infra-03]
vault_identity_oidc_role.terranix_search_console: Refreshing state... [id=terranix-search-console]
vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci]
vault_token_auth_backend_role.atlantis: Refreshing state... [id=auth/token/roles/atlantis]
vault_identity_entity.atlantis: Refreshing state... [id=dacc3864-d73d-d2ed-17a4-b679f82f8b00]
vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix]
vault_identity_entity_alias.atlantis: Refreshing state... [id=d0726b56-3fff-d17e-af08-0da70c98e11c]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818]
cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926]
keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870]
vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc]
vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9]
vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a]
vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p openbao
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p openbao
```

No changes. Your infrastructure matches the configuration.

17. project: `posthog` dir: `.` workspace: `posthog`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of posthog/posthog from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed posthog/posthog v1.0.26
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
posthog_proxy_record.v: Refreshing state... [id=019cbbe2-8cae-0000-72a0-b7884cc7ec9e]
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p posthog
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p posthog
```

No changes. Your infrastructure matches the configuration.

18. project: `snot` dir: `.` workspace: `snot`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p snot
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p snot
```

No changes. Your infrastructure matches the configuration.

19. project: `webhook` dir: `.` workspace: `webhook`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of svalabs/forgejo from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed svalabs/forgejo v1.7.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.forgejo_repository.kennel: Reading...
data.forgejo_repository.kennel: Read complete after 0s [name=kennel]
forgejo_repository_webhook.kennel_renovate: Refreshing state...
cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p webhook
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p webhook
```

No changes. Your infrastructure matches the configuration.

20. project: `ricochet` dir: `.` workspace: `ricochet`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d]
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p ricochet
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p ricochet
```

No changes. Your infrastructure matches the configuration.

21. project: `vaultwarden` dir: `.` workspace: `vaultwarden`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p vaultwarden
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p vaultwarden
```

No changes. Your infrastructure matches the configuration.

22. project: `search-console` dir: `.` workspace: `search-console`

Show Output

Initializing the backend...

Initializing provider plugins...
- Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/google from the dependency lock file
- Reusing previous version of keycloak/keycloak from the dependency lock file
- Reusing previous version of hashicorp/vault from the dependency lock file
- Reusing previous version of cloudflare/cloudflare from the dependency lock file
- Using previously-installed registry.terraform.io/jkossis/garage v1.0.5
- Using previously-installed keycloak/keycloak v5.10.0
- Using previously-installed hashicorp/random v3.9.1
- Using previously-installed hashicorp/vault v5.13.0
- Using previously-installed hashicorp/google v7.46.2
- Using previously-installed cloudflare/cloudflare v5.28.1

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ Skip tofu init when using provider development overrides. It is not
│ necessary and may error unexpectedly.
╵

OpenTofu has been successfully initialized!

You may now begin working with OpenTofu. Try running "tofu plan" to see
any changes that are required for your infrastructure. All OpenTofu commands
should now work.

If you ever set or change modules or backend configuration for OpenTofu,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
ephemeral.vault_kv_secret_v2.cloudflare_token: Opening...
ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s
data.keycloak_realm.scottylabs: Reading...
data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs]
data.google_site_verification_token.cmu_lol: Reading...
data.google_site_verification_token.cmu_guide: Reading...
data.google_site_verification_token.occ_build: Reading...
data.google_site_verification_token.cmu_courses: Reading...
data.google_site_verification_token.cmuinsta_com: Reading...
data.google_site_verification_token.andrew-inbox_com: Reading...
data.google_site_verification_token.cmueats_com: Reading...
data.google_site_verification_token.roomies_live: Reading...
data.google_site_verification_token.cmustudy_com: Reading...
data.google_site_verification_token.cmu_do: Reading...
data.google_site_verification_token.cmu_lol: Read complete after 0s [id=cmu.lol]
data.google_site_verification_token.cmuservice_shop: Reading...
data.google_site_verification_token.cmu_do: Read complete after 0s [id=cmu.do]
data.google_site_verification_token.cmubulletin_com: Reading...
data.google_site_verification_token.roomies_live: Read complete after 0s [id=roomies.live]
data.google_site_verification_token.doggylabs_org: Reading...
data.google_site_verification_token.cmubulletin_com: Read complete after 0s [id=cmubulletin.com]
data.google_site_verification_token.scottylabs_org: Reading...
data.google_site_verification_token.cmu_guide: Read complete after 0s [id=cmu.guide]
data.google_site_verification_token.cmucourses_com: Reading...
data.google_site_verification_token.cmuinsta_com: Read complete after 0s [id=cmuinsta.com]
data.google_site_verification_token.cmumaps_com: Reading...
data.google_site_verification_token.cmustudy_com: Read complete after 0s [id=cmustudy.com]
data.google_site_verification_token.cmu_quest: Reading...
data.google_site_verification_token.cmuservice_shop: Read complete after 0s [id=cmuservice.shop]
data.google_site_verification_token.occ_build: Read complete after 0s [id=occ.build]
data.google_site_verification_token.scottylabs_dev: Reading...
data.google_site_verification_token.andrew-inbox_com: Read complete after 0s [id=andrew-inbox.com]
data.google_site_verification_token.cmueats_com: Read complete after 0s [id=cmueats.com]
data.google_site_verification_token.cmucal_com: Reading...
data.google_site_verification_token.cmugpt_com: Reading...
data.google_site_verification_token.tartanhacks_org: Reading...
data.google_site_verification_token.cmu_courses: Read complete after 0s [id=cmu.courses]
data.google_site_verification_token.scotty_lol: Reading...
data.google_site_verification_token.scottylabs_dev: Read complete after 0s [id=scottylabs.dev]
data.google_site_verification_token.tartanhacks_org: Read complete after 0s [id=tartanhacks.org]
data.google_site_verification_token.tartan_vote: Reading...
data.google_site_verification_token.collegecart_org: Reading...
data.google_site_verification_token.cmugpt_com: Read complete after 0s [id=cmugpt.com]
data.google_site_verification_token.cmu_dev: Reading...
data.google_site_verification_token.doggylabs_org: Read complete after 0s [id=doggylabs.org]
data.google_site_verification_token.cmu_homes: Reading...
data.google_site_verification_token.scotty_lol: Read complete after 0s [id=scotty.lol]
data.google_site_verification_token.cmuhousing_com: Reading...
data.google_site_verification_token.tartan_vote: Read complete after 0s [id=tartan.vote]
data.google_site_verification_token.tartanhacks_com: Reading...
data.google_site_verification_token.collegecart_org: Read complete after 0s [id=collegecart.org]
data.google_site_verification_token.terrier_build: Reading...
data.google_site_verification_token.scottylabs_org: Read complete after 0s [id=scottylabs.org]
data.google_site_verification_token.scottylabs_net: Reading...
data.google_site_verification_token.cmucourses_com: Read complete after 0s [id=cmucourses.com]
data.google_site_verification_token.rent-pgh_com: Reading...
data.google_site_verification_token.cmumaps_com: Read complete after 0s [id=cmumaps.com]
data.google_site_verification_token.cmu_quest: Read complete after 0s [id=cmu.quest]
data.google_site_verification_token.terrier_build: Read complete after 0s [id=terrier.build]
data.google_site_verification_token.cmucal_com: Read complete after 0s [id=cmucal.com]
data.google_site_verification_token.scottylabs_net: Read complete after 0s [id=scottylabs.net]
data.google_site_verification_token.rent-pgh_com: Read complete after 0s [id=rent-pgh.com]
data.google_site_verification_token.cmu_dev: Read complete after 0s [id=cmu.dev]
data.google_site_verification_token.cmu_homes: Read complete after 0s [id=cmu.homes]
data.google_site_verification_token.cmuhousing_com: Read complete after 0s [id=cmuhousing.com]
data.google_site_verification_token.tartanhacks_com: Read complete after 0s [id=tartanhacks.com]
cloudflare_dns_record.this["cmu.guide-search-console"]: Refreshing state... [id=66e17aaca6761b9163be4bd1f5fbf6bb]
cloudflare_dns_record.this["cmustudy.com-search-console"]: Refreshing state... [id=fc5f9b866364a4dfdff4b03351327116]
cloudflare_dns_record.this["cmuhousing.com-search-console"]: Refreshing state... [id=3723f3c3d58a68f29d506cf44272c4fe]
cloudflare_dns_record.this["scotty.lol-search-console"]: Refreshing state... [id=cba5f67947530d8a1386fb7e4a606237]
cloudflare_dns_record.this["cmu.lol-search-console"]: Refreshing state... [id=7254f9648874e0f65f74b5e60571a6b4]
cloudflare_dns_record.this["cmugpt.com-search-console"]: Refreshing state... [id=cb856bb5376d669aefd3bafe911b69fb]
cloudflare_dns_record.this["cmueats.com-search-console"]: Refreshing state... [id=04432bb482471ce2c2852d36090ab199]
cloudflare_dns_record.this["scottylabs.org-search-console"]: Refreshing state... [id=afe998ea60845634af5eaaa02dd4704a]
cloudflare_dns_record.this["occ.build-search-console"]: Refreshing state... [id=fa869e3a71d6b4c172e3940ce642766f]
cloudflare_dns_record.this["terrier.build-search-console"]: Refreshing state... [id=0e5bed4022996e6bd162792fec3f37f3]
cloudflare_dns_record.this["scottylabs.dev-search-console"]: Refreshing state... [id=864f25d2422df08b9c86ecc944fe8fc0]
cloudflare_dns_record.this["tartan.vote-search-console"]: Refreshing state... [id=cf58032f4dbd3111d60cb1b0216b4c0d]
cloudflare_dns_record.this["cmu.quest-search-console"]: Refreshing state... [id=f9fec9b575c83acbab3b0af5dc76523c]
cloudflare_dns_record.this["cmumaps.com-search-console"]: Refreshing state... [id=53f56e3ab57a1d5b8299ec543ec4b666]
cloudflare_dns_record.this["doggylabs.org-search-console"]: Refreshing state... [id=d7898645fdfbd05ce0ca9473e57bda4f]
cloudflare_dns_record.this["cmucourses.com-search-console"]: Refreshing state... [id=ba941c528e666894af829920d1beb90b]
cloudflare_dns_record.this["cmubulletin.com-search-console"]: Refreshing state... [id=da521a014f7a08e306f07ba5c20d3ae4]
cloudflare_dns_record.this["scottylabs.net-search-console"]: Refreshing state... [id=0bb7922bb08af956a750bfbb6b1d0a43]
cloudflare_dns_record.this["cmuservice.shop-search-console"]: Refreshing state... [id=c79945c8f4974682fb38d45dc289e493]
cloudflare_dns_record.this["cmu.do-search-console"]: Refreshing state... [id=fad736d884eb893aea9670c528958790]
cloudflare_dns_record.this["rent-pgh.com-search-console"]: Refreshing state... [id=95b1ac39812457a57127d9074b166c14]
cloudflare_dns_record.this["cmuinsta.com-search-console"]: Refreshing state... [id=c9296c84e333ba72c2ae69ecb93c6857]
cloudflare_dns_record.this["cmucal.com-search-console"]: Refreshing state... [id=069646d798555f20775a10f8d3593234]
cloudflare_dns_record.this["andrew-inbox.com-search-console"]: Refreshing state... [id=6734312208e0406bc73c77c8c3ac9dfb]
cloudflare_dns_record.this["cmu.homes-search-console"]: Refreshing state... [id=e83789c146bcc6bbe07ef3cf55d3a978]
cloudflare_dns_record.this["cmu.courses-search-console"]: Refreshing state... [id=4da145a3e7fcc2ac10ef01c381449c40]
cloudflare_dns_record.this["roomies.live-search-console"]: Refreshing state... [id=e46a5c3a36953cc65f1d2f7b6c3ff169]
cloudflare_dns_record.this["collegecart.org-search-console"]: Refreshing state... [id=20511a9991cb1a4f56806982ea13e3d4]
cloudflare_dns_record.this["tartanhacks.org-search-console"]: Refreshing state... [id=9936d3f55b67b5df603204b205ff387a]
cloudflare_dns_record.this["tartanhacks.com-search-console"]: Refreshing state... [id=093a2016c43e55f3757f7a68c33b4a57]
cloudflare_dns_record.this["cmu.dev-search-console"]: Refreshing state... [id=a22c11c13e8bc14f8391ea00cc0a2acc]
google_site_verification_web_resource.andrew-inbox_com: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com]
google_site_verification_web_resource.cmu_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev]
google_site_verification_web_resource.occ_build: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build]
google_site_verification_web_resource.cmu_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol]
google_site_verification_web_resource.cmustudy_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com]
google_site_verification_web_resource.cmubulletin_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com]
google_site_verification_web_resource.cmu_quest: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest]
google_site_verification_web_resource.cmu_guide: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide]
google_site_verification_web_resource.cmucourses_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com]
google_site_verification_web_resource.cmu_do: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do]
google_site_verification_web_resource.cmuhousing_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com]
google_site_verification_web_resource.tartanhacks_org: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org]
google_site_verification_web_resource.cmuservice_shop: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop]
google_site_verification_web_resource.cmugpt_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com]
google_site_verification_web_resource.cmuinsta_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com]
google_site_verification_web_resource.terrier_build: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build]
google_site_verification_web_resource.rent-pgh_com: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com]
google_site_verification_web_resource.tartan_vote: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote]
google_site_verification_web_resource.cmu_courses: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses]
google_site_verification_web_resource.cmumaps_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com]
google_site_verification_web_resource.cmucal_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com]
google_site_verification_web_resource.cmueats_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com]
google_site_verification_web_resource.doggylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org]
google_site_verification_web_resource.tartanhacks_com: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com]
google_site_verification_web_resource.scotty_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol]
google_site_verification_web_resource.scottylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org]
google_site_verification_web_resource.scottylabs_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev]
google_site_verification_web_resource.collegecart_org: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org]
google_site_verification_web_resource.roomies_live: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live]
google_site_verification_web_resource.cmu_homes: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes]
google_site_verification_web_resource.scottylabs_net: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net]
google_site_verification_owner.cmustudy_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/ops@scottylabs.org]
google_site_verification_owner.cmu_guide_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/admin@scottylabs.org]
google_site_verification_owner.cmu_guide_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/ops@scottylabs.org]
google_site_verification_owner.cmu_do_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/admin@scottylabs.org]
google_site_verification_owner.cmustudy_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/admin@scottylabs.org]
google_site_verification_owner.cmu_do_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/ops@scottylabs.org]
google_site_verification_owner.occ_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/admin@scottylabs.org]
google_site_verification_owner.occ_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/ops@scottylabs.org]
google_site_verification_owner.cmu_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/admin@scottylabs.org]
google_site_verification_owner.cmu_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/ops@scottylabs.org]
google_site_verification_owner.cmubulletin_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/admin@scottylabs.org]
google_site_verification_owner.cmubulletin_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/ops@scottylabs.org]
google_site_verification_owner.cmu_quest_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/ops@scottylabs.org]
google_site_verification_owner.cmu_quest_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/admin@scottylabs.org]
google_site_verification_owner.tartanhacks_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/admin@scottylabs.org]
google_site_verification_owner.tartanhacks_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/ops@scottylabs.org]
google_site_verification_owner.cmuservice_shop_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/admin@scottylabs.org]
google_site_verification_owner.cmuservice_shop_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/ops@scottylabs.org]
google_site_verification_owner.cmugpt_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/ops@scottylabs.org]
google_site_verification_owner.cmugpt_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/admin@scottylabs.org]
google_site_verification_owner.andrew-inbox_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/ops@scottylabs.org]
google_site_verification_owner.andrew-inbox_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/admin@scottylabs.org]
google_site_verification_owner.cmu_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/ops@scottylabs.org]
google_site_verification_owner.cmu_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/admin@scottylabs.org]
google_site_verification_owner.cmucourses_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/ops@scottylabs.org]
google_site_verification_owner.cmucourses_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/admin@scottylabs.org]
google_site_verification_owner.cmuinsta_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/ops@scottylabs.org]
google_site_verification_owner.cmuinsta_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/admin@scottylabs.org]
google_site_verification_owner.cmucal_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/admin@scottylabs.org]
google_site_verification_owner.rent-pgh_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/admin@scottylabs.org]
google_site_verification_owner.rent-pgh_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/ops@scottylabs.org]
google_site_verification_owner.cmucal_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/ops@scottylabs.org]
google_site_verification_owner.tartan_vote_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/ops@scottylabs.org]
google_site_verification_owner.tartan_vote_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/admin@scottylabs.org]
google_site_verification_owner.tartanhacks_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/ops@scottylabs.org]
google_site_verification_owner.tartanhacks_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/admin@scottylabs.org]
google_site_verification_owner.doggylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/admin@scottylabs.org]
google_site_verification_owner.doggylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/ops@scottylabs.org]
google_site_verification_owner.cmuhousing_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/ops@scottylabs.org]
google_site_verification_owner.cmuhousing_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/admin@scottylabs.org]
google_site_verification_owner.terrier_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/admin@scottylabs.org]
google_site_verification_owner.terrier_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/ops@scottylabs.org]
google_site_verification_owner.scottylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/ops@scottylabs.org]
google_site_verification_owner.scottylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/admin@scottylabs.org]
google_site_verification_owner.cmu_homes_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/ops@scottylabs.org]
google_site_verification_owner.cmu_homes_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/admin@scottylabs.org]
google_site_verification_owner.scotty_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/admin@scottylabs.org]
google_site_verification_owner.scotty_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/ops@scottylabs.org]
google_site_verification_owner.cmu_courses_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/ops@scottylabs.org]
google_site_verification_owner.scottylabs_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/admin@scottylabs.org]
google_site_verification_owner.scottylabs_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/ops@scottylabs.org]
google_site_verification_owner.cmu_courses_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/admin@scottylabs.org]
google_site_verification_owner.cmumaps_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/ops@scottylabs.org]
google_site_verification_owner.cmumaps_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/admin@scottylabs.org]
google_site_verification_owner.collegecart_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/admin@scottylabs.org]
google_site_verification_owner.collegecart_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/ops@scottylabs.org]
google_site_verification_owner.cmueats_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/ops@scottylabs.org]
google_site_verification_owner.scottylabs_net_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/admin@scottylabs.org]
google_site_verification_owner.cmueats_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/admin@scottylabs.org]
google_site_verification_owner.scottylabs_net_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/ops@scottylabs.org]
google_site_verification_owner.roomies_live_admin: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/admin@scottylabs.org]
google_site_verification_owner.roomies_live_ops: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/ops@scottylabs.org]
ephemeral.vault_kv_secret_v2.cloudflare_token: Closing...
ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s

No changes. Your infrastructure matches the configuration.

▶️ To apply this plan, comment:
```
atlantis apply -p search-console
```
🚮 To delete this plan and lock, click here
🔁 To plan this project again, comment:
```
atlantis plan -p search-console
```

No changes. Your infrastructure matches the configuration.

Plan Summary

22 projects, 1 with changes, 21 with no changes, 0 failed

⏩ To apply all unapplied plans from this Pull Request, comment:
```
atlantis apply
```
🚮 To delete all plans and locks from this Pull Request, comment:
```
atlantis unlock
```

Ran Plan for 22 projects: 1. project: `occ` dir: `.` workspace: `occ` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `mail` dir: `.` workspace: `mail` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `nixbot` dir: `.` workspace: `nixbot` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `search-console` dir: `.` workspace: `search-console` --- ### 1. project: `occ` dir: `.` workspace: `occ` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] cloudflare_dns_record.this["incus"]: Refreshing state... [id=68d4d1524c79e8faf2eb4b01f8eeda5c] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p occ ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Focc%252Focc) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p occ ``` No changes. Your infrastructure matches the configuration. --- ### 2. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_kv_secret_v2.governance_ci_bot_token: Refreshing state... [id=secret/data/secretspec/governance/ci/BOT_TOKEN] vault_policy.governance: Refreshing state... [id=governance] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s vault_approle_auth_backend_role.governance: Refreshing state... [id=auth/approle/role/governance] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.keycloak_openid_client.realm_management: Reading... keycloak_openid_client.governance_cli: Refreshing state... [id=f19d0308-19a8-4fc4-aa5f-f909fc38c5fe] data.keycloak_openid_client.realm_management: Read complete after 0s [id=a0a15f13-b554-4bed-9fb2-3e63e0301278] vault_kv_secret_v2.governance_ci_keycloak_client_secret: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_SECRET] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/eb96eb71-82eb-4317-b8f5-326472e11484] keycloak_openid_client_service_account_role.governance_cli_realm_management["manage-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/366f6242-2ce3-4be8-b861-3561e3c4b865] keycloak_openid_client_service_account_role.governance_cli_realm_management["query-clients"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/16d40468-7ba1-4f17-ba0d-0741880f291a] vault_kv_secret_v2.governance_ci_keycloak_client_id: Refreshing state... [id=secret/data/secretspec/governance/ci/KEYCLOAK_CLIENT_ID] keycloak_openid_client_service_account_role.governance_cli_realm_management["view-users"]: Refreshing state... [id=90ac5826-08a5-4d89-8855-3d7b249de131/65f4c673-fc55-430c-b4b6-fd14ed151966] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p governance ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgovernance%252Fgovernance) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p governance ``` No changes. Your infrastructure matches the configuration. --- ### 3. project: `mail` dir: `.` workspace: `mail` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] cloudflare_email_sending_subdomain.scottylabs-org: Refreshing state... [id=d861e202e90146f49239f7f638bdb871] cloudflare_dns_record.this["scottylabs-dev-spf"]: Refreshing state... [id=e78ffa0bc6095aafd2067c900f929b50] cloudflare_dns_record.this["scottylabs-org-spf"]: Refreshing state... [id=6075ba34182127d6149528376bda1a6a] cloudflare_dns_record.this["scottylabs-org-dkim"]: Refreshing state... [id=0c3e8525e281a85dcd4f127e7babb35d] cloudflare_dns_record.this["scottylabs-dev-mx"]: Refreshing state... [id=b4e4301c200d52f66335bb93c7f3b9dd] cloudflare_email_sending_subdomain.cmu-dev: Refreshing state... [id=fcca671bdc8e46e4ad9efb669e3a190c] cloudflare_dns_record.this["scottylabs-org-mx"]: Refreshing state... [id=01791245a3e69e14b1a4b8f3801b0677] cloudflare_dns_record.this["scottylabs-dev-dkim"]: Refreshing state... [id=8f81d427fc9a20433b2b768a2820753a] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p mail ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmail%252Fmail) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p mail ``` No changes. Your infrastructure matches the configuration. --- ### 4. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s random_password.litellm_master_key: Refreshing state... [id=none] random_password.cli_proxy_api_key: Refreshing state... [id=none] random_password.litellm_salt_key: Refreshing state... [id=none] vault_kv_secret_v2.cli_proxy_api_key: Refreshing state... [id=secret/data/infra/cli-proxy-api-key] vault_kv_secret_v2.litellm_salt_key: Refreshing state... [id=secret/data/infra/litellm-salt-key] vault_kv_secret_v2.litellm_master_key: Refreshing state... [id=secret/data/infra/litellm-master-key] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.litellm: Refreshing state... [id=4ee5ecdd-c370-4a52-93ae-744332e0a509] vault_kv_secret_v2.litellm_oidc: Refreshing state... [id=secret/data/infra/litellm-oidc] keycloak_openid_group_membership_protocol_mapper.litellm_groups: Refreshing state... [id=b2e932af-b3e8-4cac-a6ea-027c1022a22f] cloudflare_dns_record.this["litellm"]: Refreshing state... [id=0fa6e5399aa6a69d978d6d425ca14f44] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p litellm ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Flitellm%252Flitellm) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p litellm ``` No changes. Your infrastructure matches the configuration. --- ### 5. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s garage_bucket.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960] garage_key.forgejo: Refreshing state... [id=GKea9810d648000e3e3b8df725] vault_kv_secret_v2.forgejo_storage: Refreshing state... [id=secret/data/infra/forgejo-storage] garage_bucket_permission.forgejo: Refreshing state... [id=65e2f6d77ab1d627c920b8e6bd764551f5f8b0334fd1f67bc47c5f5c30546960/GKea9810d648000e3e3b8df725] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.forgejo: Refreshing state... [id=110b9b02-18e1-4bac-b5ce-936bbfbc83d6] cloudflare_dns_record.this["git"]: Refreshing state... [id=f0fa6f4acf6bf381474c1a9304225f68] keycloak_openid_group_membership_protocol_mapper.forgejo_groups: Refreshing state... [id=72c7154f-372d-4a39-97c0-6516a88d6198] vault_kv_secret_v2.forgejo_oidc: Refreshing state... [id=secret/data/infra/forgejo-oidc] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p forgejo ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fforgejo%252Fforgejo) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p forgejo ``` No changes. Your infrastructure matches the configuration. --- ### 6. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] vault_policy.kennel: Refreshing state... [id=kennel] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s vault_approle_auth_backend_role.kennel: Refreshing state... [id=auth/approle/role/kennel] cloudflare_dns_record.this["*"]: Refreshing state... [id=2d4b06ae1c39a5d196a27114e07c97e9] cloudflare_dns_record.this["kennel"]: Refreshing state... [id=a34066db99519085f24a01cebcb25d69] cloudflare_dns_record.this["s3.kennel"]: Refreshing state... [id=d3acfc0e5ca45e0704c40d9e3fa2e60f] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p kennel ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkennel%252Fkennel) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p kennel ``` No changes. Your infrastructure matches the configuration. --- ### 7. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.cloudflare_api_token_permission_groups_list.all: Reading... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.cloudflare_api_token_permission_groups_list.all: Read complete after 1s cloudflare_api_token.smtp: Refreshing state... [id=6b334833d9de2b35b22769ba27265f71] cloudflare_api_token.terranix-dns: Refreshing state... [id=3096f3be78d1baa0ac9e7447414df53b] cloudflare_api_token.terranix-hosts: Refreshing state... [id=df616c9aae907d8b1442ce79d2f000b2] cloudflare_api_token.terranix-mail: Refreshing state... [id=88156a4eb6d0856486ce00aed9b99012] vault_kv_secret_v2.cloudflare_terranix-hosts: Refreshing state... [id=secret/data/infra/cloudflare-terranix-hosts] vault_kv_secret_v2.cloudflare_smtp: Refreshing state... [id=secret/data/infra/cloudflare-smtp] vault_kv_secret_v2.cloudflare_terranix-dns: Refreshing state... [id=secret/data/infra/cloudflare-terranix-dns] vault_kv_secret_v2.cloudflare_terranix-mail: Refreshing state... [id=secret/data/infra/cloudflare-terranix-mail] No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p cloudflare-tokens ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fcloudflare-tokens%252Fcloudflare-tokens) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p cloudflare-tokens ``` No changes. Your infrastructure matches the configuration. --- ### 8. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.headplane_cookie: Refreshing state... [id=none] vault_kv_secret_v2.headplane_cookie: Refreshing state... [id=secret/data/infra/headplane-cookie] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.headplane: Refreshing state... [id=40d2dbf9-409b-4edc-974c-85d5e939efac] keycloak_openid_client.headscale: Refreshing state... [id=f2875c14-dfff-4fd4-b60b-4d1e066aaeb8] keycloak_openid_group_membership_protocol_mapper.headplane_groups: Refreshing state... [id=fd683ca7-ed77-44f1-b3cc-47241ccb6fb7] vault_kv_secret_v2.headplane_oidc: Refreshing state... [id=secret/data/infra/headplane-oidc] cloudflare_dns_record.this["headplane"]: Refreshing state... [id=9139cfa1f058db85d837defe0460fd20] cloudflare_dns_record.this["headscale"]: Refreshing state... [id=4207dabef0c8dc1972f9d5aa1cd17a00] vault_kv_secret_v2.headscale_oidc: Refreshing state... [id=secret/data/infra/headscale-oidc] keycloak_openid_group_membership_protocol_mapper.headscale_groups: Refreshing state... [id=f091397a-9b6e-4887-9913-12fb542d7210] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p headscale ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fheadscale%252Fheadscale) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p headscale ``` No changes. Your infrastructure matches the configuration. --- ### 9. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] cloudflare_dns_record.this["@"]: Refreshing state... [id=63ff3b423afd444f8bd31201db232ada] cloudflare_dns_record.this["matrix"]: Refreshing state... [id=c37d2e1a4edf950b4af4544574c159a8] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p matrix ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fmatrix%252Fmatrix) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p matrix ``` No changes. Your infrastructure matches the configuration. --- ### 10. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.garage_webadmin: Refreshing state... [id=a48c9f66-cde3-463d-970c-b2d7de716185] random_password.garage_webadmin_jwt: Refreshing state... [id=none] vault_kv_secret_v2.garage_webadmin_jwt: Refreshing state... [id=secret/data/infra/garage-webadmin-jwt] keycloak_openid_group_membership_protocol_mapper.garage_webadmin_groups: Refreshing state... [id=a86e928b-6c7a-4081-a291-637e752fbabf] vault_kv_secret_v2.garage_webadmin_oidc: Refreshing state... [id=secret/data/infra/garage-webadmin-oidc] cloudflare_dns_record.this["garage"]: Refreshing state... [id=4054146ceff1515773704f89136b25f1] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p garage-webadmin ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fgarage-webadmin%252Fgarage-webadmin) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p garage-webadmin ``` No changes. Your infrastructure matches the configuration. --- ### 11. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of svalabs/forgejo from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed svalabs/forgejo v1.7.0 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s random_password.atlantis_webhook_secret: Refreshing state... [id=none] vault_kv_secret_v2.atlantis_webhook: Refreshing state... [id=secret/data/infra/atlantis] data.forgejo_repository.governance: Reading... data.forgejo_repository.infrastructure: Reading... data.forgejo_repository.governance: Read complete after 0s [name=governance] data.forgejo_repository.infrastructure: Read complete after 0s [name=infrastructure] forgejo_repository_webhook.governance: Refreshing state... forgejo_repository_webhook.infrastructure: Refreshing state... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 1s [id=scottylabs] cloudflare_dns_record.this["atlantis"]: Refreshing state... [id=d0419d10a0c0bb715bcbadc7a1c73cbb] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p atlantis ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fatlantis%252Fatlantis) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p atlantis ``` No changes. Your infrastructure matches the configuration. --- ### 12. project: `nixbot` dir: `.` workspace: `nixbot` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of svalabs/forgejo from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed svalabs/forgejo v1.7.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ random_password.nixbot_forgejo: Refreshing state... [id=none] forgejo_team.nixbot: Refreshing state... [name=nixbot] forgejo_user.nixbot: Refreshing state... forgejo_team_member.nixbot: Refreshing state... data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.nixbot: Refreshing state... [id=a45a253b-c5ce-4a75-91cd-c7876354e731] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_kv_secret_v2.nixbot_oidc: Refreshing state... [id=secret/data/infra/nixbot-oidc] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s forgejo_personal_access_token.nixbot: Refreshing state... [name=nixbot] cloudflare_dns_record.this["nixbot"]: Refreshing state... [id=715d7a325208700119db81c024eaf46f] vault_kv_secret_v2.nixbot_forgejo: Refreshing state... [id=secret/data/infra/nixbot-forgejo] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p nixbot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fnixbot%252Fnixbot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p nixbot ``` No changes. Your infrastructure matches the configuration. --- ### 13. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s random_password.grafana_secret_key: Refreshing state... [id=none] vault_kv_secret_v2.grafana_secret_key: Refreshing state... [id=secret/data/infra/grafana-secret-key] garage_key.tempo: Refreshing state... [id=GK9769dcb3b38a1ae26ac62b3c] garage_bucket.tempo_traces: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c] garage_key.loki: Refreshing state... [id=GKeed8ed294debe12a38bbd470] garage_bucket.loki_chunks: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3] vault_kv_secret_v2.tempo_s3: Refreshing state... [id=secret/data/infra/tempo-s3] garage_bucket_permission.loki: Refreshing state... [id=f6c7e9f9881b09dc6bb9e3bce85f425fc97c526343f5b819086ac692339425c3/GKeed8ed294debe12a38bbd470] garage_bucket_permission.tempo: Refreshing state... [id=d0776d1c829f4fe5cf4e6317d02057fbecc7cf8c39a28f7be5391bba0aaf632c/GK9769dcb3b38a1ae26ac62b3c] vault_kv_secret_v2.loki_s3: Refreshing state... [id=secret/data/infra/loki-s3] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.grafana: Refreshing state... [id=527e25bc-77c3-43d5-ac28-32aa2f21fa9c] cloudflare_dns_record.this["uptime"]: Refreshing state... [id=0909f2bd8ade5d54a53b58a2a3fef540] cloudflare_dns_record.this["grafana"]: Refreshing state... [id=9924f9e66892a5aeafe09ed0128a65a0] keycloak_openid_group_membership_protocol_mapper.grafana_groups: Refreshing state... [id=5c54e939-7a03-4857-93f5-437ca25e206e] vault_kv_secret_v2.grafana_oidc: Refreshing state... [id=secret/data/infra/grafana-oidc] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p observability ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fobservability%252Fobservability) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p observability ``` No changes. Your infrastructure matches the configuration. --- ### 14. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] cloudflare_dns_record.this["snoopy"]: Refreshing state... [id=7f849c841bba1c0d46009308acaf7f55] cloudflare_dns_record.this["signage-01"]: Refreshing state... [id=a80079e44697aebac2cbda4ab85a79ee] cloudflare_dns_record.this["infra-01"]: Refreshing state... [id=30f50d5655d03d54b472480be1476c1c] cloudflare_dns_record.this["deploy-01"]: Refreshing state... [id=bcb794198cc3e1ad25e3707e3af7fd1d] cloudflare_dns_record.this["infra-02"]: Refreshing state... [id=1856c054b772a4ac62e0f53625163997] cloudflare_dns_record.this["infra-03"]: Refreshing state... [id=9172a8cbcb80ce7c1ed2cae96e820659] cloudflare_zone_setting.always_use_https["9ae67b02fb7f5a546a8fd18527115ea5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["6a38c25604c09abe30baff7e2176a673"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["eacdf87531ae2114049a9585ab73ef9d"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["78a8413b3e73553f7def8cefe1bdc386"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["d8546107eab7e3bf8d413759c28b66c2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5c2e7faf46bf72319da6cdffadca7f43"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dfe11e930ca4ef3d94cd9f79072315cd"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["97416783adc55489c6f601bbfaa48936"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5bad63854979cad3d5b8b2a9b97aae67"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["acfb686acc0532474d7f379317afb648"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["b485862979e222b68b5980cc50e8c63b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["90331dc9edd007e59c828faa3b8d73a9"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["55c7eec3f2a44b6b943962682d1d1953"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a3c2419a7e47cdc909022c5815310013"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2bf8696c7e2fdc56f9b9e98443f001cc"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["2d4a1424a61322658b5e478b6f563e26"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["a0686a6fe9f1e181d0c1dcdf9c293a9b"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c46bbc75077117690939c20f203a3c00"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["706d92947e0941effeffd392637f97a2"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["ab365d7cec88f972e0b26bf59afd174f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["dbedf6cff671263c0d6f69b482895ee4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["9746fc8415923e40c5961ad58708e7f6"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["03d47c74036171bb4a0ad2679adf7ca5"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["388da333f823d55e3d5cfbd686303ed4"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["c304ee4431d1d2c0313343aff8ffc338"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["3b8197fed31cd2c5f52b2bbbe8b1fa0f"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["261d3e0e93bb02ae1e6f31c7b09c6441"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["5ec9401ebede43c78ad0167fefd3b862"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["4585d8c6e8c50f8e8450c220783d6cc3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["50f297e4046f66a46bcb445f9b92f2c3"]: Refreshing state... [id=always_use_https] cloudflare_zone_setting.always_use_https["98d2138c49ff1067e6fc6146febadcca"]: Refreshing state... [id=always_use_https] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p hosts ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fhosts%252Fhosts) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p hosts ``` No changes. Your infrastructure matches the configuration. --- ### 15. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff copying 1 paths... copying path '/nix/store/16l6dkilw8hmj415bjc5lh34xkn2hf3w-config.tf.json.drv' to 'daemon'... ✔ config.tf.json.drv (0s) Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.master: Reading... data.keycloak_realm.scottylabs: Reading... keycloak_realm.scottylabs: Refreshing state... [id=scottylabs] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_saml_identity_provider.cmu_saml: Refreshing state... [id=cmu-saml] keycloak_openid_client.keycloak_master: Refreshing state... [id=6fc98345-43f6-4958-9641-021899c93dad] data.keycloak_realm.master: Read complete after 1s [id=master] keycloak_realm_user_profile.scottylabs: Refreshing state... [id=scottylabs] ephemeral.vault_kv_secret_v2.keycloak_ldap: Opening... ephemeral.vault_kv_secret_v2.forgejo_idp: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... data.vault_kv_secret_v2.keycloak_idp: Reading... data.keycloak_role.master_admin: Reading... keycloak_openid_client.terranix: Refreshing state... [id=491efdcd-735e-4e56-9381-75dd817d87c4] data.vault_kv_secret_v2.keycloak_idp: Read complete after 0s [id=secret/data/infra/keycloak-idp] ephemeral.vault_kv_secret_v2.forgejo_idp: Open complete after 0s ephemeral.vault_kv_secret_v2.keycloak_ldap: Open complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s keycloak_oidc_google_identity_provider.google: Refreshing state... [id=google] keycloak_custom_identity_provider_mapper.cmu_saml_username: Refreshing state... [id=32fed5ec-b30e-4b69-90a3-64c58f592ded] keycloak_oidc_identity_provider.slack: Refreshing state... [id=slack] keycloak_oidc_identity_provider.cmu: Refreshing state... [id=cmu] keycloak_ldap_user_federation.cmu: Refreshing state... [id=TtPPdhQJRUSFFwr_nJ2gcA] keycloak_oidc_identity_provider.cmu_git: Refreshing state... [id=cmu-dev] data.keycloak_role.master_admin: Read complete after 0s [id=b8fc6ad5-7b83-4d86-9227-620c8e50e720] keycloak_oidc_identity_provider.apple: Refreshing state... [id=apple] keycloak_custom_identity_provider_mapper.slack_email: Refreshing state... [id=ea769c6c-b497-49ec-9a4d-8ba28005e62d] keycloak_custom_identity_provider_mapper.slack_id: Refreshing state... [id=7d6f3768-e0a7-41c2-b252-95d2709c65b7] keycloak_custom_identity_provider_mapper.slack_name: Refreshing state... [id=2e4d5410-12d5-46b3-b3d4-7f5b17ee0556] keycloak_openid_group_membership_protocol_mapper.keycloak_master_groups: Refreshing state... [id=70e06f16-65e8-4487-b02b-afa3cc9af0ea] keycloak_oidc_identity_provider.master_scottylabs: Refreshing state... [id=scottylabs] keycloak_custom_identity_provider_mapper.cmu_username: Refreshing state... [id=65d1857d-19e5-4db5-940c-7751b770b4ac] keycloak_custom_identity_provider_mapper.google_email: Refreshing state... [id=ab2117f2-dcbf-4409-a7b7-c7354317e6cc] keycloak_custom_identity_provider_mapper.google_id: Refreshing state... [id=eda09ecd-d9ce-4ab0-a585-8f7d45dff7de] keycloak_custom_identity_provider_mapper.google_name: Refreshing state... [id=9d5c678f-df91-493d-a575-be1ce56a34e0] keycloak_ldap_user_attribute_mapper.cmu_ldap_primary_affiliation: Refreshing state... [id=68cb7c40-51a4-4b5f-b520-617ae560163b] keycloak_ldap_user_attribute_mapper.cmu_ldap_modify_date: Refreshing state... [id=5618310c-00e4-4bec-9e04-3975357268ae] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_email: Refreshing state... [id=267b1bc1-9714-46d5-85c0-e3b9a120b4da] keycloak_ldap_user_attribute_mapper.cmu_ldap_class: Refreshing state... [id=2f7671ad-081b-497a-b868-e48ba2e1d651] keycloak_ldap_user_attribute_mapper.cmu_ldap_level: Refreshing state... [id=981dc6b9-9957-48d2-94f4-c9e8182af115] keycloak_ldap_user_attribute_mapper.cmu_ldap_departments: Refreshing state... [id=da295d4b-3ee1-41b2-a9cb-4364c308c4fc] keycloak_ldap_user_attribute_mapper.cmu_ldap_display_name: Refreshing state... [id=ffc86fab-f094-4d62-83a8-9aeffb3b6784] keycloak_ldap_user_attribute_mapper.cmu_ldap_creation_date: Refreshing state... [id=e271c3e5-024c-441d-8662-00aff6f95f60] keycloak_ldap_user_attribute_mapper.cmu_ldap_last_name: Refreshing state... [id=1bdeb17a-f3b5-4d20-9405-f18950582ec9] keycloak_ldap_user_attribute_mapper.cmu_ldap_affiliations: Refreshing state... [id=d5051889-ed12-4307-ae20-6cb808f988d1] keycloak_ldap_user_attribute_mapper.cmu_ldap_first_name: Refreshing state... [id=5545f837-8bb1-4435-8797-a780dfd3c290] keycloak_ldap_custom_mapper.cmu_ldap_kerberos_principal: Refreshing state... [id=5f10a23b-84b2-4441-ac93-8042dd701e29] keycloak_ldap_user_attribute_mapper.cmu_ldap_username: Refreshing state... [id=4277dde1-b06e-42ff-acf8-5537604cb505] keycloak_ldap_user_attribute_mapper.cmu_ldap_email: Refreshing state... [id=409b11eb-37ae-4943-9983-7613b0bf392f] keycloak_ldap_user_attribute_mapper.cmu_ldap_colleges: Refreshing state... [id=0ad2e74c-edb9-48c8-a7c7-3958d49ca802] keycloak_ldap_user_attribute_mapper.cmu_ldap_status: Refreshing state... [id=c4907832-a07a-4c5c-9a36-852b13f90cf6] keycloak_ldap_user_attribute_mapper.cmu_ldap_orcid: Refreshing state... [id=66b0d533-9f67-4b17-8bce-d056c3196377] keycloak_ldap_user_attribute_mapper.cmu_ldap_full_name: Refreshing state... [id=3246c4a5-14c9-444d-ba7d-ab2fa110c38d] keycloak_custom_identity_provider_mapper.cmudev_name: Refreshing state... [id=17703dd7-f88f-4d6b-88f0-e7561e796c8f] keycloak_ldap_user_attribute_mapper.cmu_ldap_middle_name: Refreshing state... [id=73050ab4-9a3a-43cd-be03-6eaf2c891113] keycloak_ldap_msad_user_account_control_mapper.cmu_ldap_msad: Refreshing state... [id=59e25378-3850-47d9-bfa3-18aec5d2bef3] keycloak_custom_identity_provider_mapper.cmudev_id: Refreshing state... [id=5944bfd3-9704-482e-ac25-c41a40351cd7] keycloak_custom_identity_provider_mapper.cmudev_email: Refreshing state... [id=2763e7d7-f102-479e-a560-41704bcf5e4b] keycloak_custom_identity_provider_mapper.cmudev_username: Refreshing state... [id=8f04fb48-8434-43d6-accd-5b3a1e48e9b2] vault_kv_secret_v2.keycloak_terranix: Refreshing state... [id=secret/data/infra/keycloak-terranix] keycloak_openid_client_service_account_realm_role.terranix_admin: Refreshing state... [id=fbb7e0fc-e8a2-4540-86b1-9608d19a0724/b8fc6ad5-7b83-4d86-9227-620c8e50e720] keycloak_custom_identity_provider_mapper.apple_email: Refreshing state... [id=68841e9f-a367-4c71-ac26-668ac8e559ad] keycloak_custom_identity_provider_mapper.apple_id: Refreshing state... [id=81993bf9-93bf-40fd-9b59-0909abb570f2] ephemeral.vault_kv_secret_v2.keycloak_ldap: Closing... ephemeral.vault_kv_secret_v2.keycloak_ldap: Close complete after 0s cloudflare_dns_record.this["idp"]: Refreshing state... [id=76512b10636c34a8230d5618d365d6bc] ephemeral.vault_kv_secret_v2.forgejo_idp: Closing... ephemeral.vault_kv_secret_v2.forgejo_idp: Close complete after 0s ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + create ~ update in-place (current -> planned) OpenTofu will perform the following actions: # keycloak_custom_identity_provider_mapper.master_devops_admin will be created + resource "keycloak_custom_identity_provider_mapper" "master_devops_admin" { + extra_config = { + "are.claim.values.regex" = "false" + "claims" = jsonencode( [ + { + key = "groups" + value = "/projects/devops/admins" }, ] ) + "role" = "admin" + "syncMode" = "FORCE" } + id = (known after apply) + identity_provider_alias = "scottylabs" + identity_provider_mapper = "oidc-advanced-role-idp-mapper" + name = "devops-admin" + realm = "master" } # keycloak_oidc_identity_provider.master_scottylabs will be updated in-place ! resource "keycloak_oidc_identity_provider" "master_scottylabs" { ! client_secret_wo = (write-only attribute) ! extra_config = { + "allowAdminRoleMapping" = "true" # (1 unchanged element hidden) } id = "scottylabs" # (29 unchanged attributes hidden) } Plan: 1 to add, 1 to change, 0 to destroy. ╷ │ Warning: Deprecated Resource │ │ with data.vault_kv_secret_v2.keycloak_idp, │ on config.tf.json line 21, in data.vault_kv_secret_v2.keycloak_idp: │ 21: } │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead │ │ (and one more similar warning elsewhere) ╵ ╷ │ Warning: Value derived from a deprecated source │ │ with keycloak_oidc_google_identity_provider.google, │ on config.tf.json line 485, in resource.keycloak_oidc_google_identity_provider.google: │ 485: } │ │ This value is derived from data.vault_kv_secret_v2.keycloak_idp, which is │ deprecated with the following message: │ │ Deprecated. Please use new Ephemeral KVV2 Secret resource │ `vault_kv_secret_v2` instead ╵ ───────────────────────────────────────────────────────────────────────────── Saved the plan to: /var/lib/atlantis/repos/ScottyLabs/infrastructure/183/keycloak/keycloak-keycloak.tfplan To perform exactly these actions, run the following command to apply: tofu apply "/var/lib/atlantis/repos/ScottyLabs/infrastructure/183/keycloak/keycloak-keycloak.tfplan" ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p keycloak ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fkeycloak%252Fkeycloak) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p keycloak ``` Plan: 1 to add, 1 to change, 0 to destroy. --- ### 16. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ vault_identity_oidc_key.terranix: Refreshing state... [id=terranix] vault_policy.shared_read: Refreshing state... [id=shared-read] vault_jwt_auth_backend.forgejo: Refreshing state... [id=jwt] vault_identity_oidc.server: Refreshing state... [id=http://127.0.0.1:8200] vault_policy.infra: Refreshing state... [id=infra] vault_auth_backend.approle: Refreshing state... [id=approle] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... vault_policy.devops: Refreshing state... [id=devops] data.vault_auth_backend.token: Reading... data.vault_auth_backend.token: Read complete after 0s [id=token] ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s vault_policy.ci: Refreshing state... [id=ci] vault_policy.terranix_search_console: Refreshing state... [id=terranix-search-console] vault_mount.kv: Refreshing state... [id=secret] vault_approle_auth_backend_role.host["signage-01"]: Refreshing state... [id=auth/approle/role/signage-01] vault_approle_auth_backend_role.host["snoopy"]: Refreshing state... [id=auth/approle/role/snoopy] vault_approle_auth_backend_role.host["deploy-01"]: Refreshing state... [id=auth/approle/role/deploy-01] vault_identity_group.all_members: Refreshing state... [id=17a94032-1dfa-8c66-af1f-ac3942f8d13f] vault_identity_group.devops: Refreshing state... [id=6922ccb6-70c2-acef-0580-49477441e3ff] vault_approle_auth_backend_role.host["infra-01"]: Refreshing state... [id=auth/approle/role/infra-01] vault_approle_auth_backend_role.host["infra-03"]: Refreshing state... [id=auth/approle/role/infra-03] vault_identity_oidc_role.terranix_search_console: Refreshing state... [id=terranix-search-console] vault_jwt_auth_backend_role.ci: Refreshing state... [id=auth/jwt/role/ci] vault_token_auth_backend_role.atlantis: Refreshing state... [id=auth/token/roles/atlantis] vault_identity_entity.atlantis: Refreshing state... [id=dacc3864-d73d-d2ed-17a4-b679f82f8b00] vault_kv_secret_v2.cachix: Refreshing state... [id=secret/data/shared/cachix] vault_identity_entity_alias.atlantis: Refreshing state... [id=d0726b56-3fff-d17e-af08-0da70c98e11c] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] keycloak_openid_client.openbao: Refreshing state... [id=86926066-77c5-458e-be5a-cb585b75c818] cloudflare_dns_record.this["secrets"]: Refreshing state... [id=c24ad8899e7a3b573f1d2d7b95711926] keycloak_openid_group_membership_protocol_mapper.openbao_groups: Refreshing state... [id=cafd878e-dbc6-4376-95de-f09c2e5b9870] vault_jwt_auth_backend.oidc: Refreshing state... [id=oidc] vault_identity_group_alias.all_members: Refreshing state... [id=3371c9f2-3d4b-eafe-20e5-f2bfed63fdb9] vault_identity_group_alias.devops: Refreshing state... [id=f7f8c2b9-125e-5c92-efda-361e93cd2d2a] vault_jwt_auth_backend_role.default: Refreshing state... [id=auth/oidc/role/default] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p openbao ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fopenbao%252Fopenbao) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p openbao ``` No changes. Your infrastructure matches the configuration. --- ### 17. project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of posthog/posthog from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed posthog/posthog v1.0.26 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ posthog_proxy_record.v: Refreshing state... [id=019cbbe2-8cae-0000-72a0-b7884cc7ec9e] data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s cloudflare_dns_record.this["v"]: Refreshing state... [id=a34d75a85d3128693767b2db9b7f233e] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p posthog ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fposthog%252Fposthog) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p posthog ``` No changes. Your infrastructure matches the configuration. --- ### 18. project: `snot` dir: `.` workspace: `snot` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s cloudflare_dns_record.this["knot"]: Refreshing state... [id=264276915648465296ad9d24fb70a29b] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p snot ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fsnot%252Fsnot) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p snot ``` No changes. Your infrastructure matches the configuration. --- ### 19. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of svalabs/forgejo from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed svalabs/forgejo v1.7.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.forgejo_repository.kennel: Reading... data.forgejo_repository.kennel: Read complete after 0s [name=kennel] forgejo_repository_webhook.kennel_renovate: Refreshing state... cloudflare_dns_record.this["webhooks"]: Refreshing state... [id=0ec7b1a8c64ceb6e83ded9a5842a1198] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p webhook ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fwebhook%252Fwebhook) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p webhook ``` No changes. Your infrastructure matches the configuration. --- ### 20. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... cloudflare_dns_record.this["oauth"]: Refreshing state... [id=346fac8950e4873a27d5cfb72104783d] data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p ricochet ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fricochet%252Fricochet) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p ricochet ``` No changes. Your infrastructure matches the configuration. --- ### 21. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] cloudflare_dns_record.this["vault"]: Refreshing state... [id=7828e0eeb9e7f251c797f565828a47f6] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p vaultwarden ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fvaultwarden%252Fvaultwarden) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p vaultwarden ``` No changes. Your infrastructure matches the configuration. --- ### 22. project: `search-console` dir: `.` workspace: `search-console` <details><summary>Show Output</summary> ```diff Initializing the backend... Initializing provider plugins... - Reusing previous version of registry.terraform.io/jkossis/garage from the dependency lock file - Reusing previous version of hashicorp/random from the dependency lock file - Reusing previous version of hashicorp/google from the dependency lock file - Reusing previous version of keycloak/keycloak from the dependency lock file - Reusing previous version of hashicorp/vault from the dependency lock file - Reusing previous version of cloudflare/cloudflare from the dependency lock file - Using previously-installed registry.terraform.io/jkossis/garage v1.0.5 - Using previously-installed keycloak/keycloak v5.10.0 - Using previously-installed hashicorp/random v3.9.1 - Using previously-installed hashicorp/vault v5.13.0 - Using previously-installed hashicorp/google v7.46.2 - Using previously-installed cloudflare/cloudflare v5.28.1 ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ Skip tofu init when using provider development overrides. It is not │ necessary and may error unexpectedly. ╵ OpenTofu has been successfully initialized! You may now begin working with OpenTofu. Try running "tofu plan" to see any changes that are required for your infrastructure. All OpenTofu commands should now work. If you ever set or change modules or backend configuration for OpenTofu, rerun this command to reinitialize your working directory. If you forget, other commands will detect it and remind you to do so if necessary. ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ ephemeral.vault_kv_secret_v2.cloudflare_token: Opening... ephemeral.vault_kv_secret_v2.cloudflare_token: Open complete after 0s data.keycloak_realm.scottylabs: Reading... data.keycloak_realm.scottylabs: Read complete after 0s [id=scottylabs] data.google_site_verification_token.cmu_lol: Reading... data.google_site_verification_token.cmu_guide: Reading... data.google_site_verification_token.occ_build: Reading... data.google_site_verification_token.cmu_courses: Reading... data.google_site_verification_token.cmuinsta_com: Reading... data.google_site_verification_token.andrew-inbox_com: Reading... data.google_site_verification_token.cmueats_com: Reading... data.google_site_verification_token.roomies_live: Reading... data.google_site_verification_token.cmustudy_com: Reading... data.google_site_verification_token.cmu_do: Reading... data.google_site_verification_token.cmu_lol: Read complete after 0s [id=cmu.lol] data.google_site_verification_token.cmuservice_shop: Reading... data.google_site_verification_token.cmu_do: Read complete after 0s [id=cmu.do] data.google_site_verification_token.cmubulletin_com: Reading... data.google_site_verification_token.roomies_live: Read complete after 0s [id=roomies.live] data.google_site_verification_token.doggylabs_org: Reading... data.google_site_verification_token.cmubulletin_com: Read complete after 0s [id=cmubulletin.com] data.google_site_verification_token.scottylabs_org: Reading... data.google_site_verification_token.cmu_guide: Read complete after 0s [id=cmu.guide] data.google_site_verification_token.cmucourses_com: Reading... data.google_site_verification_token.cmuinsta_com: Read complete after 0s [id=cmuinsta.com] data.google_site_verification_token.cmumaps_com: Reading... data.google_site_verification_token.cmustudy_com: Read complete after 0s [id=cmustudy.com] data.google_site_verification_token.cmu_quest: Reading... data.google_site_verification_token.cmuservice_shop: Read complete after 0s [id=cmuservice.shop] data.google_site_verification_token.occ_build: Read complete after 0s [id=occ.build] data.google_site_verification_token.scottylabs_dev: Reading... data.google_site_verification_token.andrew-inbox_com: Read complete after 0s [id=andrew-inbox.com] data.google_site_verification_token.cmueats_com: Read complete after 0s [id=cmueats.com] data.google_site_verification_token.cmucal_com: Reading... data.google_site_verification_token.cmugpt_com: Reading... data.google_site_verification_token.tartanhacks_org: Reading... data.google_site_verification_token.cmu_courses: Read complete after 0s [id=cmu.courses] data.google_site_verification_token.scotty_lol: Reading... data.google_site_verification_token.scottylabs_dev: Read complete after 0s [id=scottylabs.dev] data.google_site_verification_token.tartanhacks_org: Read complete after 0s [id=tartanhacks.org] data.google_site_verification_token.tartan_vote: Reading... data.google_site_verification_token.collegecart_org: Reading... data.google_site_verification_token.cmugpt_com: Read complete after 0s [id=cmugpt.com] data.google_site_verification_token.cmu_dev: Reading... data.google_site_verification_token.doggylabs_org: Read complete after 0s [id=doggylabs.org] data.google_site_verification_token.cmu_homes: Reading... data.google_site_verification_token.scotty_lol: Read complete after 0s [id=scotty.lol] data.google_site_verification_token.cmuhousing_com: Reading... data.google_site_verification_token.tartan_vote: Read complete after 0s [id=tartan.vote] data.google_site_verification_token.tartanhacks_com: Reading... data.google_site_verification_token.collegecart_org: Read complete after 0s [id=collegecart.org] data.google_site_verification_token.terrier_build: Reading... data.google_site_verification_token.scottylabs_org: Read complete after 0s [id=scottylabs.org] data.google_site_verification_token.scottylabs_net: Reading... data.google_site_verification_token.cmucourses_com: Read complete after 0s [id=cmucourses.com] data.google_site_verification_token.rent-pgh_com: Reading... data.google_site_verification_token.cmumaps_com: Read complete after 0s [id=cmumaps.com] data.google_site_verification_token.cmu_quest: Read complete after 0s [id=cmu.quest] data.google_site_verification_token.terrier_build: Read complete after 0s [id=terrier.build] data.google_site_verification_token.cmucal_com: Read complete after 0s [id=cmucal.com] data.google_site_verification_token.scottylabs_net: Read complete after 0s [id=scottylabs.net] data.google_site_verification_token.rent-pgh_com: Read complete after 0s [id=rent-pgh.com] data.google_site_verification_token.cmu_dev: Read complete after 0s [id=cmu.dev] data.google_site_verification_token.cmu_homes: Read complete after 0s [id=cmu.homes] data.google_site_verification_token.cmuhousing_com: Read complete after 0s [id=cmuhousing.com] data.google_site_verification_token.tartanhacks_com: Read complete after 0s [id=tartanhacks.com] cloudflare_dns_record.this["cmu.guide-search-console"]: Refreshing state... [id=66e17aaca6761b9163be4bd1f5fbf6bb] cloudflare_dns_record.this["cmustudy.com-search-console"]: Refreshing state... [id=fc5f9b866364a4dfdff4b03351327116] cloudflare_dns_record.this["cmuhousing.com-search-console"]: Refreshing state... [id=3723f3c3d58a68f29d506cf44272c4fe] cloudflare_dns_record.this["scotty.lol-search-console"]: Refreshing state... [id=cba5f67947530d8a1386fb7e4a606237] cloudflare_dns_record.this["cmu.lol-search-console"]: Refreshing state... [id=7254f9648874e0f65f74b5e60571a6b4] cloudflare_dns_record.this["cmugpt.com-search-console"]: Refreshing state... [id=cb856bb5376d669aefd3bafe911b69fb] cloudflare_dns_record.this["cmueats.com-search-console"]: Refreshing state... [id=04432bb482471ce2c2852d36090ab199] cloudflare_dns_record.this["scottylabs.org-search-console"]: Refreshing state... [id=afe998ea60845634af5eaaa02dd4704a] cloudflare_dns_record.this["occ.build-search-console"]: Refreshing state... [id=fa869e3a71d6b4c172e3940ce642766f] cloudflare_dns_record.this["terrier.build-search-console"]: Refreshing state... [id=0e5bed4022996e6bd162792fec3f37f3] cloudflare_dns_record.this["scottylabs.dev-search-console"]: Refreshing state... [id=864f25d2422df08b9c86ecc944fe8fc0] cloudflare_dns_record.this["tartan.vote-search-console"]: Refreshing state... [id=cf58032f4dbd3111d60cb1b0216b4c0d] cloudflare_dns_record.this["cmu.quest-search-console"]: Refreshing state... [id=f9fec9b575c83acbab3b0af5dc76523c] cloudflare_dns_record.this["cmumaps.com-search-console"]: Refreshing state... [id=53f56e3ab57a1d5b8299ec543ec4b666] cloudflare_dns_record.this["doggylabs.org-search-console"]: Refreshing state... [id=d7898645fdfbd05ce0ca9473e57bda4f] cloudflare_dns_record.this["cmucourses.com-search-console"]: Refreshing state... [id=ba941c528e666894af829920d1beb90b] cloudflare_dns_record.this["cmubulletin.com-search-console"]: Refreshing state... [id=da521a014f7a08e306f07ba5c20d3ae4] cloudflare_dns_record.this["scottylabs.net-search-console"]: Refreshing state... [id=0bb7922bb08af956a750bfbb6b1d0a43] cloudflare_dns_record.this["cmuservice.shop-search-console"]: Refreshing state... [id=c79945c8f4974682fb38d45dc289e493] cloudflare_dns_record.this["cmu.do-search-console"]: Refreshing state... [id=fad736d884eb893aea9670c528958790] cloudflare_dns_record.this["rent-pgh.com-search-console"]: Refreshing state... [id=95b1ac39812457a57127d9074b166c14] cloudflare_dns_record.this["cmuinsta.com-search-console"]: Refreshing state... [id=c9296c84e333ba72c2ae69ecb93c6857] cloudflare_dns_record.this["cmucal.com-search-console"]: Refreshing state... [id=069646d798555f20775a10f8d3593234] cloudflare_dns_record.this["andrew-inbox.com-search-console"]: Refreshing state... [id=6734312208e0406bc73c77c8c3ac9dfb] cloudflare_dns_record.this["cmu.homes-search-console"]: Refreshing state... [id=e83789c146bcc6bbe07ef3cf55d3a978] cloudflare_dns_record.this["cmu.courses-search-console"]: Refreshing state... [id=4da145a3e7fcc2ac10ef01c381449c40] cloudflare_dns_record.this["roomies.live-search-console"]: Refreshing state... [id=e46a5c3a36953cc65f1d2f7b6c3ff169] cloudflare_dns_record.this["collegecart.org-search-console"]: Refreshing state... [id=20511a9991cb1a4f56806982ea13e3d4] cloudflare_dns_record.this["tartanhacks.org-search-console"]: Refreshing state... [id=9936d3f55b67b5df603204b205ff387a] cloudflare_dns_record.this["tartanhacks.com-search-console"]: Refreshing state... [id=093a2016c43e55f3757f7a68c33b4a57] cloudflare_dns_record.this["cmu.dev-search-console"]: Refreshing state... [id=a22c11c13e8bc14f8391ea00cc0a2acc] google_site_verification_web_resource.andrew-inbox_com: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com] google_site_verification_web_resource.cmu_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev] google_site_verification_web_resource.occ_build: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build] google_site_verification_web_resource.cmu_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol] google_site_verification_web_resource.cmustudy_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com] google_site_verification_web_resource.cmubulletin_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com] google_site_verification_web_resource.cmu_quest: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest] google_site_verification_web_resource.cmu_guide: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide] google_site_verification_web_resource.cmucourses_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com] google_site_verification_web_resource.cmu_do: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do] google_site_verification_web_resource.cmuhousing_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com] google_site_verification_web_resource.tartanhacks_org: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org] google_site_verification_web_resource.cmuservice_shop: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop] google_site_verification_web_resource.cmugpt_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com] google_site_verification_web_resource.cmuinsta_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com] google_site_verification_web_resource.terrier_build: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build] google_site_verification_web_resource.rent-pgh_com: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com] google_site_verification_web_resource.tartan_vote: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote] google_site_verification_web_resource.cmu_courses: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses] google_site_verification_web_resource.cmumaps_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com] google_site_verification_web_resource.cmucal_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com] google_site_verification_web_resource.cmueats_com: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com] google_site_verification_web_resource.doggylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org] google_site_verification_web_resource.tartanhacks_com: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com] google_site_verification_web_resource.scotty_lol: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol] google_site_verification_web_resource.scottylabs_org: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org] google_site_verification_web_resource.scottylabs_dev: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev] google_site_verification_web_resource.collegecart_org: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org] google_site_verification_web_resource.roomies_live: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live] google_site_verification_web_resource.cmu_homes: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes] google_site_verification_web_resource.scottylabs_net: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net] google_site_verification_owner.cmustudy_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/ops@scottylabs.org] google_site_verification_owner.cmu_guide_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/admin@scottylabs.org] google_site_verification_owner.cmu_guide_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.guide/ops@scottylabs.org] google_site_verification_owner.cmu_do_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/admin@scottylabs.org] google_site_verification_owner.cmustudy_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmustudy.com/admin@scottylabs.org] google_site_verification_owner.cmu_do_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.do/ops@scottylabs.org] google_site_verification_owner.occ_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/admin@scottylabs.org] google_site_verification_owner.occ_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Focc.build/ops@scottylabs.org] google_site_verification_owner.cmu_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/admin@scottylabs.org] google_site_verification_owner.cmu_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.lol/ops@scottylabs.org] google_site_verification_owner.cmubulletin_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/admin@scottylabs.org] google_site_verification_owner.cmubulletin_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmubulletin.com/ops@scottylabs.org] google_site_verification_owner.cmu_quest_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/ops@scottylabs.org] google_site_verification_owner.cmu_quest_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.quest/admin@scottylabs.org] google_site_verification_owner.tartanhacks_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/admin@scottylabs.org] google_site_verification_owner.tartanhacks_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.org/ops@scottylabs.org] google_site_verification_owner.cmuservice_shop_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/admin@scottylabs.org] google_site_verification_owner.cmuservice_shop_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuservice.shop/ops@scottylabs.org] google_site_verification_owner.cmugpt_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/ops@scottylabs.org] google_site_verification_owner.cmugpt_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmugpt.com/admin@scottylabs.org] google_site_verification_owner.andrew-inbox_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/ops@scottylabs.org] google_site_verification_owner.andrew-inbox_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fandrew-inbox.com/admin@scottylabs.org] google_site_verification_owner.cmu_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/ops@scottylabs.org] google_site_verification_owner.cmu_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.dev/admin@scottylabs.org] google_site_verification_owner.cmucourses_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/ops@scottylabs.org] google_site_verification_owner.cmucourses_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucourses.com/admin@scottylabs.org] google_site_verification_owner.cmuinsta_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/ops@scottylabs.org] google_site_verification_owner.cmuinsta_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuinsta.com/admin@scottylabs.org] google_site_verification_owner.cmucal_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/admin@scottylabs.org] google_site_verification_owner.rent-pgh_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/admin@scottylabs.org] google_site_verification_owner.rent-pgh_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Frent-pgh.com/ops@scottylabs.org] google_site_verification_owner.cmucal_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmucal.com/ops@scottylabs.org] google_site_verification_owner.tartan_vote_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/ops@scottylabs.org] google_site_verification_owner.tartan_vote_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartan.vote/admin@scottylabs.org] google_site_verification_owner.tartanhacks_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/ops@scottylabs.org] google_site_verification_owner.tartanhacks_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Ftartanhacks.com/admin@scottylabs.org] google_site_verification_owner.doggylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/admin@scottylabs.org] google_site_verification_owner.doggylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fdoggylabs.org/ops@scottylabs.org] google_site_verification_owner.cmuhousing_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/ops@scottylabs.org] google_site_verification_owner.cmuhousing_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmuhousing.com/admin@scottylabs.org] google_site_verification_owner.terrier_build_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/admin@scottylabs.org] google_site_verification_owner.terrier_build_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fterrier.build/ops@scottylabs.org] google_site_verification_owner.scottylabs_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/ops@scottylabs.org] google_site_verification_owner.scottylabs_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.org/admin@scottylabs.org] google_site_verification_owner.cmu_homes_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/ops@scottylabs.org] google_site_verification_owner.cmu_homes_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.homes/admin@scottylabs.org] google_site_verification_owner.scotty_lol_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/admin@scottylabs.org] google_site_verification_owner.scotty_lol_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscotty.lol/ops@scottylabs.org] google_site_verification_owner.cmu_courses_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/ops@scottylabs.org] google_site_verification_owner.scottylabs_dev_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/admin@scottylabs.org] google_site_verification_owner.scottylabs_dev_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.dev/ops@scottylabs.org] google_site_verification_owner.cmu_courses_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmu.courses/admin@scottylabs.org] google_site_verification_owner.cmumaps_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/ops@scottylabs.org] google_site_verification_owner.cmumaps_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmumaps.com/admin@scottylabs.org] google_site_verification_owner.collegecart_org_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/admin@scottylabs.org] google_site_verification_owner.collegecart_org_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcollegecart.org/ops@scottylabs.org] google_site_verification_owner.cmueats_com_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/ops@scottylabs.org] google_site_verification_owner.scottylabs_net_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/admin@scottylabs.org] google_site_verification_owner.cmueats_com_admin: Refreshing state... [id=webResource/dns%3A%2F%2Fcmueats.com/admin@scottylabs.org] google_site_verification_owner.scottylabs_net_ops: Refreshing state... [id=webResource/dns%3A%2F%2Fscottylabs.net/ops@scottylabs.org] google_site_verification_owner.roomies_live_admin: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/admin@scottylabs.org] google_site_verification_owner.roomies_live_ops: Refreshing state... [id=webResource/dns%3A%2F%2Froomies.live/ops@scottylabs.org] ephemeral.vault_kv_secret_v2.cloudflare_token: Closing... ephemeral.vault_kv_secret_v2.cloudflare_token: Close complete after 0s No changes. Your infrastructure matches the configuration. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p search-console ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Finfrastructure%252F.%252Fsearch-console%252Fsearch-console) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p search-console ``` No changes. Your infrastructure matches the configuration. --- ### Plan Summary 22 projects, 1 with changes, 21 with no changes, 0 failed * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```

anish commented

2026-10-26 07:59:43 +00:00

Author

Owner

atlantis apply

scottylabs-bot commented

2026-10-26 07:59:55 +00:00

Owner

Ran Apply for 22 projects:

project: garage-webadmin dir: . workspace: garage-webadmin
project: matrix dir: . workspace: matrix
project: governance dir: . workspace: governance
project: observability dir: . workspace: observability
project: nixbot dir: . workspace: nixbot
project: forgejo dir: . workspace: forgejo
project: kennel dir: . workspace: kennel
project: headscale dir: . workspace: headscale
project: litellm dir: . workspace: litellm
project: cloudflare-tokens dir: . workspace: cloudflare-tokens
project: hosts dir: . workspace: hosts
project: atlantis dir: . workspace: atlantis
project: mail dir: . workspace: mail
project: occ dir: . workspace: occ
project: keycloak dir: . workspace: keycloak
project: ricochet dir: . workspace: ricochet
project: posthog dir: . workspace: posthog
project: openbao dir: . workspace: openbao
project: vaultwarden dir: . workspace: vaultwarden
project: webhook dir: . workspace: webhook
project: snot dir: . workspace: snot
project: search-console dir: . workspace: search-console

1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

garage_webadmin_client_secret = <sensitive>

2. project: `matrix` dir: `.` workspace: `matrix`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

3. project: `governance` dir: `.` workspace: `governance`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

governance_approle_role_id = "985fa7b6-334c-4e8c-5780-46dc57798bbf"

4. project: `observability` dir: `.` workspace: `observability`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

5. project: `nixbot` dir: `.` workspace: `nixbot`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

6. project: `forgejo` dir: `.` workspace: `forgejo`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

7. project: `kennel` dir: `.` workspace: `kennel`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

kennel_approle_role_id = "6d684d7c-a739-cad2-58c2-9fb7d9bc48fc"

8. project: `headscale` dir: `.` workspace: `headscale`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

headplane_client_secret = <sensitive>
headscale_client_secret = <sensitive>

9. project: `litellm` dir: `.` workspace: `litellm`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

10. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

11. project: `hosts` dir: `.` workspace: `hosts`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

12. project: `atlantis` dir: `.` workspace: `atlantis`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

13. project: `mail` dir: `.` workspace: `mail`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

14. project: `occ` dir: `.` workspace: `occ`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

15. project: `keycloak` dir: `.` workspace: `keycloak`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
keycloak_oidc_identity_provider.master_scottylabs: Modifying... [id=scottylabs]
keycloak_oidc_identity_provider.master_scottylabs: Modifications complete after 0s [id=scottylabs]
keycloak_custom_identity_provider_mapper.master_devops_admin: Creating...
keycloak_custom_identity_provider_mapper.master_devops_admin: Creation complete after 0s [id=c0b94b4c-21e5-401f-90dc-c05624c611e4]

Apply complete! Resources: 1 added, 1 changed, 0 destroyed.

16. project: `ricochet` dir: `.` workspace: `ricochet`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

17. project: `posthog` dir: `.` workspace: `posthog`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

18. project: `openbao` dir: `.` workspace: `openbao`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Outputs:

approle_role_ids = {
  "deploy-01" = "d63a47b8-ceb2-d59e-e8f0-659023851ae8"
  "infra-01" = "2df30359-cc03-22a6-8ebe-3eb36dfc0194"
  "infra-03" = "89a95389-6f6c-b634-c9b2-9a148028b126"
  "signage-01" = "328a7073-0315-f7f4-5433-8d48f6092e22"
  "snoopy" = "210a166d-85f9-d8f4-3e81-9d0f994c5043"
}
atlantis_entity_id = "dacc3864-d73d-d2ed-17a4-b679f82f8b00"

19. project: `vaultwarden` dir: `.` workspace: `vaultwarden`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

20. project: `webhook` dir: `.` workspace: `webhook`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

21. project: `snot` dir: `.` workspace: `snot`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

22. project: `search-console` dir: `.` workspace: `search-console`

Show Output

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

Apply Summary

22 projects, 22 successful, 0 failed, 0 errored

Ran Apply for 22 projects: 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` 1. project: `matrix` dir: `.` workspace: `matrix` 1. project: `governance` dir: `.` workspace: `governance` 1. project: `observability` dir: `.` workspace: `observability` 1. project: `nixbot` dir: `.` workspace: `nixbot` 1. project: `forgejo` dir: `.` workspace: `forgejo` 1. project: `kennel` dir: `.` workspace: `kennel` 1. project: `headscale` dir: `.` workspace: `headscale` 1. project: `litellm` dir: `.` workspace: `litellm` 1. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` 1. project: `hosts` dir: `.` workspace: `hosts` 1. project: `atlantis` dir: `.` workspace: `atlantis` 1. project: `mail` dir: `.` workspace: `mail` 1. project: `occ` dir: `.` workspace: `occ` 1. project: `keycloak` dir: `.` workspace: `keycloak` 1. project: `ricochet` dir: `.` workspace: `ricochet` 1. project: `posthog` dir: `.` workspace: `posthog` 1. project: `openbao` dir: `.` workspace: `openbao` 1. project: `vaultwarden` dir: `.` workspace: `vaultwarden` 1. project: `webhook` dir: `.` workspace: `webhook` 1. project: `snot` dir: `.` workspace: `snot` 1. project: `search-console` dir: `.` workspace: `search-console` --- ### 1. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: garage_webadmin_client_secret = <sensitive> ``` </details> --- ### 2. project: `matrix` dir: `.` workspace: `matrix` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 3. project: `governance` dir: `.` workspace: `governance` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: governance_approle_role_id = "985fa7b6-334c-4e8c-5780-46dc57798bbf" ``` </details> --- ### 4. project: `observability` dir: `.` workspace: `observability` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 5. project: `nixbot` dir: `.` workspace: `nixbot` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 6. project: `forgejo` dir: `.` workspace: `forgejo` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 7. project: `kennel` dir: `.` workspace: `kennel` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: kennel_approle_role_id = "6d684d7c-a739-cad2-58c2-9fb7d9bc48fc" ``` </details> --- ### 8. project: `headscale` dir: `.` workspace: `headscale` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: headplane_client_secret = <sensitive> headscale_client_secret = <sensitive> ``` </details> --- ### 9. project: `litellm` dir: `.` workspace: `litellm` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 10. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 11. project: `hosts` dir: `.` workspace: `hosts` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 12. project: `atlantis` dir: `.` workspace: `atlantis` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 13. project: `mail` dir: `.` workspace: `mail` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 14. project: `occ` dir: `.` workspace: `occ` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 15. project: `keycloak` dir: `.` workspace: `keycloak` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ keycloak_oidc_identity_provider.master_scottylabs: Modifying... [id=scottylabs] keycloak_oidc_identity_provider.master_scottylabs: Modifications complete after 0s [id=scottylabs] keycloak_custom_identity_provider_mapper.master_devops_admin: Creating... keycloak_custom_identity_provider_mapper.master_devops_admin: Creation complete after 0s [id=c0b94b4c-21e5-401f-90dc-c05624c611e4] Apply complete! Resources: 1 added, 1 changed, 0 destroyed. ``` </details> --- ### 16. project: `ricochet` dir: `.` workspace: `ricochet` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 17. project: `posthog` dir: `.` workspace: `posthog` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 18. project: `openbao` dir: `.` workspace: `openbao` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. Outputs: approle_role_ids = { "deploy-01" = "d63a47b8-ceb2-d59e-e8f0-659023851ae8" "infra-01" = "2df30359-cc03-22a6-8ebe-3eb36dfc0194" "infra-03" = "89a95389-6f6c-b634-c9b2-9a148028b126" "signage-01" = "328a7073-0315-f7f4-5433-8d48f6092e22" "snoopy" = "210a166d-85f9-d8f4-3e81-9d0f994c5043" } atlantis_entity_id = "dacc3864-d73d-d2ed-17a4-b679f82f8b00" ``` </details> --- ### 19. project: `vaultwarden` dir: `.` workspace: `vaultwarden` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 20. project: `webhook` dir: `.` workspace: `webhook` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 21. project: `snot` dir: `.` workspace: `snot` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### 22. project: `search-console` dir: `.` workspace: `search-console` <details><summary>Show Output</summary> ```diff ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /nix/store/kz7wa775n0c2ki74pwmsfs252wcgn2lk-terraform-provider-forgejo-1.7.0-team-repository-and-topics │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ Apply complete! Resources: 0 added, 0 changed, 0 destroyed. ``` </details> --- ### Apply Summary 22 projects, 22 successful, 0 failed, 0 errored

anish merged commit 44c973b1cf into main

2026-10-26 08:00:02 +00:00

anish deleted branch keycloak-admin-access

2026-10-26 08:00:02 +00:00

scottylabs-bot commented

2026-10-26 08:00:04 +00:00

Owner

Locks and plans deleted for the projects and workspaces modified in this pull request:

dir: . workspaces: atlantis, cloudflare-tokens, forgejo, garage-webadmin, governance, headscale, hosts, kennel, keycloak, litellm, mail, matrix, nixbot, observability, occ, openbao, posthog, ricochet, search-console, snot, vaultwarden, webhook

Locks and plans deleted for the projects and workspaces modified in this pull request: - dir: `.` workspaces: `atlantis`, `cloudflare-tokens`, `forgejo`, `garage-webadmin`, `governance`, `headscale`, `hosts`, `kennel`, `keycloak`, `litellm`, `mail`, `matrix`, `nixbot`, `observability`, `occ`, `openbao`, `posthog`, `ricochet`, `search-console`, `snot`, `vaultwarden`, `webhook`

No reviewers

No labels

No milestone

No project

No assignees

2 participants

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

ScottyLabs/infrastructure!183

No description provided.

Rows
Columns

feat: add keycloak admin access through the scottylabs realm #183

Kennel Deployments

1. project: occ dir: . workspace: occ

2. project: governance dir: . workspace: governance

3. project: mail dir: . workspace: mail

4. project: garage-webadmin dir: . workspace: garage-webadmin

5. project: kennel dir: . workspace: kennel

6. project: headscale dir: . workspace: headscale

7. project: matrix dir: . workspace: matrix

8. project: forgejo dir: . workspace: forgejo

9. project: litellm dir: . workspace: litellm

10. project: hosts dir: . workspace: hosts

11. project: nixbot dir: . workspace: nixbot

12. project: observability dir: . workspace: observability

13. project: cloudflare-tokens dir: . workspace: cloudflare-tokens

14. project: keycloak dir: . workspace: keycloak

15. project: atlantis dir: . workspace: atlantis

16. project: snot dir: . workspace: snot

17. project: openbao dir: . workspace: openbao

18. project: posthog dir: . workspace: posthog

19. project: vaultwarden dir: . workspace: vaultwarden

20. project: ricochet dir: . workspace: ricochet

21. project: webhook dir: . workspace: webhook

22. project: search-console dir: . workspace: search-console

Plan Summary

1. project: occ dir: . workspace: occ

2. project: litellm dir: . workspace: litellm

3. project: atlantis dir: . workspace: atlantis

4. project: matrix dir: . workspace: matrix

5. project: forgejo dir: . workspace: forgejo

6. project: nixbot dir: . workspace: nixbot

7. project: kennel dir: . workspace: kennel

8. project: hosts dir: . workspace: hosts

9. project: cloudflare-tokens dir: . workspace: cloudflare-tokens

10. project: mail dir: . workspace: mail

11. project: headscale dir: . workspace: headscale

12. project: garage-webadmin dir: . workspace: garage-webadmin

13. project: governance dir: . workspace: governance

14. project: observability dir: . workspace: observability

15. project: keycloak dir: . workspace: keycloak

16. project: openbao dir: . workspace: openbao

17. project: webhook dir: . workspace: webhook

18. project: posthog dir: . workspace: posthog

19. project: snot dir: . workspace: snot

20. project: vaultwarden dir: . workspace: vaultwarden

21. project: ricochet dir: . workspace: ricochet

22. project: search-console dir: . workspace: search-console

Apply Summary

1. project: kennel dir: . workspace: kennel

2. project: hosts dir: . workspace: hosts

3. project: forgejo dir: . workspace: forgejo

4. project: litellm dir: . workspace: litellm

5. project: keycloak dir: . workspace: keycloak

6. project: matrix dir: . workspace: matrix

7. project: cloudflare-tokens dir: . workspace: cloudflare-tokens

8. project: mail dir: . workspace: mail

9. project: headscale dir: . workspace: headscale

10. project: governance dir: . workspace: governance

11. project: occ dir: . workspace: occ

12. project: atlantis dir: . workspace: atlantis

13. project: observability dir: . workspace: observability

14. project: nixbot dir: . workspace: nixbot

15. project: openbao dir: . workspace: openbao

16. project: garage-webadmin dir: . workspace: garage-webadmin

17. project: search-console dir: . workspace: search-console

18. project: vaultwarden dir: . workspace: vaultwarden

19. project: snot dir: . workspace: snot

20. project: posthog dir: . workspace: posthog

21. project: ricochet dir: . workspace: ricochet

22. project: webhook dir: . workspace: webhook

Plan Summary

1. project: occ dir: . workspace: occ

2. project: governance dir: . workspace: governance

3. project: mail dir: . workspace: mail

4. project: litellm dir: . workspace: litellm

5. project: forgejo dir: . workspace: forgejo

6. project: kennel dir: . workspace: kennel

7. project: cloudflare-tokens dir: . workspace: cloudflare-tokens

8. project: headscale dir: . workspace: headscale

9. project: matrix dir: . workspace: matrix

1. project: `occ` dir: `.` workspace: `occ`

2. project: `governance` dir: `.` workspace: `governance`

3. project: `mail` dir: `.` workspace: `mail`

4. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin`

5. project: `kennel` dir: `.` workspace: `kennel`

6. project: `headscale` dir: `.` workspace: `headscale`

7. project: `matrix` dir: `.` workspace: `matrix`

8. project: `forgejo` dir: `.` workspace: `forgejo`

9. project: `litellm` dir: `.` workspace: `litellm`

10. project: `hosts` dir: `.` workspace: `hosts`

11. project: `nixbot` dir: `.` workspace: `nixbot`

12. project: `observability` dir: `.` workspace: `observability`

13. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens`

14. project: `keycloak` dir: `.` workspace: `keycloak`

15. project: `atlantis` dir: `.` workspace: `atlantis`

16. project: `snot` dir: `.` workspace: `snot`

17. project: `openbao` dir: `.` workspace: `openbao`

18. project: `posthog` dir: `.` workspace: `posthog`

19. project: `vaultwarden` dir: `.` workspace: `vaultwarden`

20. project: `ricochet` dir: `.` workspace: `ricochet`

21. project: `webhook` dir: `.` workspace: `webhook`

22. project: `search-console` dir: `.` workspace: `search-console`

1. project: `occ` dir: `.` workspace: `occ`

2. project: `litellm` dir: `.` workspace: `litellm`

3. project: `atlantis` dir: `.` workspace: `atlantis`

4. project: `matrix` dir: `.` workspace: `matrix`

5. project: `forgejo` dir: `.` workspace: `forgejo`

6. project: `nixbot` dir: `.` workspace: `nixbot`

7. project: `kennel` dir: `.` workspace: `kennel`

8. project: `hosts` dir: `.` workspace: `hosts`

9. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens`

10. project: `mail` dir: `.` workspace: `mail`

11. project: `headscale` dir: `.` workspace: `headscale`

12. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin`

13. project: `governance` dir: `.` workspace: `governance`

14. project: `observability` dir: `.` workspace: `observability`

15. project: `keycloak` dir: `.` workspace: `keycloak`

16. project: `openbao` dir: `.` workspace: `openbao`

17. project: `webhook` dir: `.` workspace: `webhook`

18. project: `posthog` dir: `.` workspace: `posthog`

19. project: `snot` dir: `.` workspace: `snot`

20. project: `vaultwarden` dir: `.` workspace: `vaultwarden`

21. project: `ricochet` dir: `.` workspace: `ricochet`

22. project: `search-console` dir: `.` workspace: `search-console`

1. project: `kennel` dir: `.` workspace: `kennel`

2. project: `hosts` dir: `.` workspace: `hosts`

3. project: `forgejo` dir: `.` workspace: `forgejo`

4. project: `litellm` dir: `.` workspace: `litellm`

5. project: `keycloak` dir: `.` workspace: `keycloak`

6. project: `matrix` dir: `.` workspace: `matrix`

7. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens`

8. project: `mail` dir: `.` workspace: `mail`

9. project: `headscale` dir: `.` workspace: `headscale`

10. project: `governance` dir: `.` workspace: `governance`

11. project: `occ` dir: `.` workspace: `occ`

12. project: `atlantis` dir: `.` workspace: `atlantis`

13. project: `observability` dir: `.` workspace: `observability`

14. project: `nixbot` dir: `.` workspace: `nixbot`

15. project: `openbao` dir: `.` workspace: `openbao`

16. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin`

17. project: `search-console` dir: `.` workspace: `search-console`

18. project: `vaultwarden` dir: `.` workspace: `vaultwarden`

19. project: `snot` dir: `.` workspace: `snot`

20. project: `posthog` dir: `.` workspace: `posthog`

21. project: `ricochet` dir: `.` workspace: `ricochet`

22. project: `webhook` dir: `.` workspace: `webhook`

1. project: `occ` dir: `.` workspace: `occ`

2. project: `governance` dir: `.` workspace: `governance`

3. project: `mail` dir: `.` workspace: `mail`

4. project: `litellm` dir: `.` workspace: `litellm`

5. project: `forgejo` dir: `.` workspace: `forgejo`

6. project: `kennel` dir: `.` workspace: `kennel`

7. project: `cloudflare-tokens` dir: `.` workspace: `cloudflare-tokens`

8. project: `headscale` dir: `.` workspace: `headscale`

9. project: `matrix` dir: `.` workspace: `matrix`

10. project: `garage-webadmin` dir: `.` workspace: `garage-webadmin`

11. project: `atlantis` dir: `.` workspace: `atlantis`

12. project: `nixbot` dir: `.` workspace: `nixbot`

13. project: `observability` dir: `.` workspace: `observability`

14. project: `hosts` dir: `.` workspace: `hosts`